Medtronic Vulnerabilità

Sequenza temporale

Genere

Not Defined	16
Medical Device Software	10

Prodotto

Medtronic Valleylab FT10 Energy Platform	4
Medtronic Smart Model 25000 Patient Reader	3
Medtronic CareLink 2090 Programmer	3
Medtronic 2090 Carelink Programmer	3
Medtronic Valleylab Exchange Client	2

Contromisure

Official Fix	4
Temporary Fix	0
Workaround	1
Unavailable	1
Not Defined	20

Sfruttabilità

High	0
Functional	0
Proof-of-Concept	0
Unproven	1
Not Defined	25

Accesso al vettore

Not Defined	0
Physical	11
Local	4
Adjacent	6
Network	5

Autenticazione

Not Defined	0
High	0
Low	4
None	22

Interazione dell'utente

Not Defined	0
Required	3
None	23

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	1
≤4	1
≤5	7
≤6	9
≤7	3
≤8	2
≤9	1
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	1
≤5	7
≤6	9
≤7	3
≤8	2
≤9	1
≤10	2

VulDB

≤1	0
≤2	0
≤3	2
≤4	3
≤5	12
≤6	3
≤7	0
≤8	3
≤9	1
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	5
≤6	4
≤7	6
≤8	4
≤9	2
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	1
≤8	0
≤9	0
≤10	1

Fornitore

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 giorni

<1k	13
<2k	9
<5k	2
<10k	0
<25k	1
<50k	1
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	23
<2k	0
<5k	2
<10k	0
<25k	0
<50k	1
<100k	0
≥100k	0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (60): 2090 Carelink Programmer (3), 8840 N'Vision Clinician Programmer (2), 8870 N'Vision Removable Application Card (2), 24950 MyCareLink Monitor (2), 24952 MyCareLink Monitor (2), Amplia CRT-D (2), CareLink 2090 Programmer (3), CareLink 9790 Programmer 29901 (1), CareLink Monitor (2), Claria CRT-D (2), Compia CRT-D (2), Concerto CRT-D (2), Consulta CRT-D (2), Evera ICD (2), InsterStim Applications (1), MMT 508 (2), MMT 522 (2), MMT 523 (2), MMT 523K (2), MMT 530G (2), MMT 551 (2), MMT 722 (2), MMT 723 (2), MMT 723K (2), MMT 751 (2), Maximo II CRT-D (2), Maximo II ICD (2), MinMed 508 (1), MiniMed 620G (1), MiniMed 630G (1), MiniMed 640G (1), MiniMed 670G (1), MiniMed Paradigm 515 (1), MiniMed Paradigm 522 (1), MiniMed Paradigm 522K (1), MiniMed Paradigm 523 (1), MiniMed Paradigm 712E (1), MiniMed Paradigm 715 (1), MiniMed Paradigm 722 (1), MiniMed Paradigm 722K (1), MiniMed Paradigm 723 (1), Minimed Paradigm 512 (1), Minimed Paradigm 712 (1), Mirro ICD (2), MyCareLink 24950 (2), MyCareLink 24952 (2), MyCareLink Monitor (2), MyCareLink Patient Monitor (2), Nayamed ND ICD (2), Paceart Optima (1), Paradigm wireless insulin pump (1), Primo ICD (2), Protecta CRT-D (2), Protecta ICD (2), Secura ICD (2), Smart Model 25000 Patient Reader (3), Valleylab Exchange Client (2), Valleylab FT10 Energy Platform (4), Valleylab FX8 Energy Platform (2), Valleylab LS10 Energy Platform (2)

Data di pubblicazione	Base	Temp	Vulnerabilità	Prod	Sfr	Con	EPSS	CTI	CVE
29/06/2023	9.5	9.5	Medtronic Paceart Optima Microsoft Messaging Queuing Service escalazione di privilegi	Sconosciuto	Not Defined	Not Defined	0.00053	0.03	CVE-2023-31222
01/03/2023	5.8	5.8	Medtronic InsterStim Applications autenticazione debole	Sconosciuto	Not Defined	Official Fix	0.00054	0.00	CVE-2023-25931
24/09/2022	2.9	2.9	Medtronic MiniMed 620G escalazione di privilegi	Sconosciuto	Not Defined	Workaround	0.00042	0.04	CVE-2022-32537
13/12/2020	9.6	9.2	Medtronic Smart Model 25000 Patient Reader Update System race condition	Medical Device Software	Not Defined	Official Fix	0.00312	0.00	CVE-2020-27252
13/12/2020	8.8	8.4	Medtronic Smart Model 25000 Patient Reader Debug Command buffer overflow	Medical Device Software	Not Defined	Official Fix	0.00544	0.00	CVE-2020-25187
13/12/2020	5.5	5.3	Medtronic Smart Model 25000 Patient Reader App Authentication autenticazione debole	Medical Device Software	Not Defined	Official Fix	0.00065	0.00	CVE-2020-25183
08/11/2019	7.4	7.4	Medtronic Valleylab Exchange Client autenticazione debole	Medical Device Software	Not Defined	Not Defined	0.00162	0.03	CVE-2019-13543
08/11/2019	5.5	5.5	Medtronic Valleylab Exchange Client Password Hashing escalazione di privilegi	Medical Device Software	Not Defined	Not Defined	0.00044	0.02	CVE-2019-13539
08/11/2019	3.3	3.3	Medtronic Valleylab LS10 Energy Platform RFID escalazione di privilegi	Medical Device Software	Not Defined	Not Defined	0.00067	0.00	CVE-2019-13535
08/11/2019	4.4	4.4	Medtronic Valleylab LS10 Energy Platform RFID autenticazione debole	Medical Device Software	Not Defined	Not Defined	0.00055	0.00	CVE-2019-13531

16 non vengono visualizzate più voci

🔒 Login Required

You need to signup and login to see more of the remaining 16 results.

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Do you need the next level of professionalism?

Upgrade your account now!