CVE-2020-27252 PoC — Medtronic MyCareLink Smart Model 25000 Patient Reader 输入验证错误漏洞

Source

https://github.com/OccultSlolem/GatorMed

Associated Vulnerability

Title:Medtronic MyCareLink Smart Model 25000 Patient Reader 输入验证错误漏洞 (CVE-2020-27252)
Description:Medtronic MyCareLink Smart Model 25000 Patient Reader是印度Medtronic公司的一个用于医疗行业可与医疗设备进行可视化交互的阅读器。 MCL Smart Patient Reader 存在输入验证错误漏洞，该漏洞源于容易出现竞争状况Patient Reader软件更新系统，允许未签名的固件在患者阅读器上上传并执行。攻击者可能在设备上远程执行代码，从而导致设备控制。

Description

A simulation of CVE-2020-27252 for CSC699.

Readme

# React + TypeScript + Vite

This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.

Currently, two official plugins are available:

- [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/README.md) uses [Babel](https://babeljs.io/) for Fast Refresh
- [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react-swc) uses [SWC](https://swc.rs/) for Fast Refresh

## Expanding the ESLint configuration

If you are developing a production application, we recommend updating the configuration to enable type aware lint rules:

- Configure the top-level `parserOptions` property like this:

```js
export default {
  // other rules...
  parserOptions: {
    ecmaVersion: 'latest',
    sourceType: 'module',
    project: ['./tsconfig.json', './tsconfig.node.json'],
    tsconfigRootDir: __dirname,
  },
}
```

- Replace `plugin:@typescript-eslint/recommended` to `plugin:@typescript-eslint/recommended-type-checked` or `plugin:@typescript-eslint/strict-type-checked`
- Optionally add `plugin:@typescript-eslint/stylistic-type-checked`
- Install [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react) and add `plugin:react/recommended` & `plugin:react/jsx-runtime` to the `extends` list

File Snapshot


 [4.0K]  /data/pocs/73e12332373524bb3acf91132717b805e9df0b71
├── [ 685]  index.html
├── [1.0K]  LICENSE.md
├── [ 967]  package.json
├── [187K]  package-lock.json
├── [4.0K]  public
│   ├── [ 17K]  favicon.png
│   └── [435K]  pacemaker.png
├── [1.3K]  README.md
├── [4.0K]  src
│   ├── [ 15K]  App.tsx
│   ├── [4.0K]  assets
│   │   └── [4.0K]  react.svg
│   ├── [   0]  index.css
│   ├── [1.2K]  Layout.tsx
│   ├── [ 946]  main.tsx
│   └── [  38]  vite-env.d.ts
├── [ 605]  tsconfig.json
├── [ 233]  tsconfig.node.json
└── [ 163]  vite.config.ts

3 directories, 16 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!