Skip to content
OpenAdvisories
Medium · 4.6 CVE-2018-8849 EUVD-2018-20457GHSA-w48q-g7g7-4m96

Medtronic N'Vision Clinician Programmer Missing Encryption of Sensitive Data

Published May 18, 2018 · Updated Jun 27, 2025 · Assigned by icscert

Description

Medtronic N'Vision Clinician Programmer 8840 N'Vision Clinician Programme and 8870 N'Vision removable Application Card do not encrypt PII and PHI while at rest.

Affected products

VendorProductAffectedFixed
Medtronic N'Vision Clinician Programmer all versions —
Medtronic 8870 N’Vision removable Application Card all versions —

Advisories 1

References