Sensitive Data Exposure in Medtronic CareLink Programmers

CVE-2018-18984

What is CVE-2018-18984?

The Medtronic CareLink 2090 Programmer, CareLink 9790 Programmer, and Encore Programmer 29901 are vulnerable due to insufficient encryption of sensitive information, including personally identifiable information (PII) and protected health information (PHI), while at rest. This vulnerability can lead to unauthorized access to sensitive data, raising significant privacy and security concerns for users and healthcare providers.

References