Medtronic Programmer Vulnerabilities: Credential Storage, Path Traversal, and Channel Restriction Issues

Critical Vulnerability Information 1. Vulnerability Overview CVE IDs: CVE-2018-5466, CVE-2018-5468, CVE-2018-5499 Vendor: Medtronic Affected Devices: 2090 CareLink Programmer, 29901 Encore Programmer Vulnerability Types: - Passwords stored in recoverable format (CVE-2018-5466) - Relative path traversal (CVE-2018-5468) - Improper restriction of communication channel to intended endpoint (CVE-2018-5499) 2. Risk Assessment Successful exploitation of these vulnerabilities may allow an attacker with physical access to extract product credentials from the 2090 Programmer, thereby gaining access to the software deployment network. Successful exploitation may also allow an attacker with local network access to interfere with communications between the programmer and the software deployment network. 3. Technical Details Passwords stored in recoverable format: The device stores usernames and passwords for each product in a recoverable format. CVSS v3 Base Score: 4.9. Relative path traversal: The software deployment network contains a directory traversal vulnerability, allowing attackers to read files on the system. CVSS v3 Base Score: 4.8. Improper restriction of communication channel to intended endpoint: The product uses a virtual private network (VPN) connection to securely download updates, but does not verify whether it remains connected to the intended VPN. CVSS v3 Base Score: 7.1. 4. Affected Products 2090 CareLink Programmer, all versions 29901 Encore Programmer, all versions 5. Mitigation Measures Maintain strong physical controls to protect programmers. Connect programmers only to managed, secure networks. Update programmer software when Medtronic releases updates. Disconnect programmers from the network if network connectivity is not required. Offline updates are available; contact your Medtronic representative for more information.

Goal Reached Thanks to every supporter — we hit 100%!

Medtronic Programmer Vulnerabilities: Credential Storage, Path Traversal, and Channel Restriction Issues