Skip to content
OpenAdvisories
Medium · 4.6 CVE-2018-18984 EUVD-2018-10688GHSA-474q-vp74-243q

Medtronic 9790, 2090 CareLink, and 29901 Encore Programmers Missing Encryption of Sensitive Data

Published Dec 14, 2018 · Updated May 22, 2025 · Assigned by icscert

Vendor: Medtronic Product: 29901 Encore Programmer Product: CareLink 2090 Programmer Product: CareLink 9790 Programmer

Description

Medtronic CareLink and Encore Programmers

do not encrypt or do not sufficiently encrypt sensitive
PII and PHI information while at rest .

Affected products

VendorProductAffectedFixed
Medtronic CareLink 9790 Programmer All versions —
Medtronic CareLink 2090 Programmer All versions —
Medtronic 29901 Encore Programmer All versions —

Advisories 1

References