CVE-2018-8849 Vulnerability Details

  /     /     /  

CVE-2018-8849 Metadata Quick Info

CVE Published: 18/05/2018 | CVE Updated: 16/09/2024 | CVE Year: 2018
Source: icscert | Vendor: Medtronic | Product: N\'Vision Clinician Programmer
Status : PUBLISHED

---

CVE-2018-8849 Description

Medtronic N\'Vision Clinician Programmer 8840 N\'Vision Clinician Programmer, all versions, and 8870 N\'Vision removable Application Card, all versions does not encrypt PII and PHI while at rest.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-311
CWE Name: MISSING ENCRYPTION OF SENSITIVE DATA CWE-311
Source: Medtronic

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).