Medtronic MyCareLink 24950 Patient Monitor Insufficient Verification of Data Authenticity

Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An attacker who obtains per-product credentials from the monitor and paired implantable cardiac device information can potentially upload invalid data to the Medtronic CareLink network.

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

对数据真实性的验证不充分

Medtronic MyCareLink 24950 Patient Monitor和24952 Patient Monitor 安全漏洞

Medtronic MyCareLink 24950 Patient Monitor和24952 Patient Monitor都是美国Medtronic公司的用于监测病人生命体征的监护仪设备。 Medtronic MyCareLink 24950 Patient Monitor和24952 Patient Monitor中存在安全漏洞，该漏洞源于受影响的产品更新服务没有充分地验证被上传数据的真实性。攻击者可借助该漏洞该向Medtronic CareLink网络中上传无效的数据。

N/A

N/A