Debug Code Vulnerability in Medtronic MyCareLink Patient Monitor

CVE-2018-8868

What is CVE-2018-8868?

The Medtronic MyCareLink Patient Monitor, including models 24950 and 24952, contains debug code that was designed for testing communication interfaces. This code can be exploited by attackers with physical access to the device, allowing them to manipulate the communication between the monitor and implantable cardiac devices. Using short-range wireless protocols, an assailant could read or write arbitrary memory values to a target implantable device, posing significant risks to patient safety and device integrity.

References