Heap Overflow Vulnerability in Medtronic MyCareLink Smart 25000 Devices
CVE-2020-25187

9.8CRITICAL

Key Information:

Vendor

Medtronic

Status
Smart Model 25000 Patient Reader
Vendor
CVE Published:
14 December 2020

What is CVE-2020-25187?

The Medtronic MyCareLink Smart 25000 device is susceptible to a heap overflow vulnerability. An attacker with authenticated access can exploit this issue by executing a debug command that is sent to the MCL Smart Reader. This vulnerability can lead to remote code execution on the device, potentially granting the attacker control over the Smart Reader and compromising its functionality. It is crucial for users and administrators to stay informed about this issue and ensure they have the latest security updates.

Affected Version(s)

Smart Model 25000 Patient Reader All versions

References

https://global.medtronic.com/xg-en/product-security/secur...
x_refsource_MISC
https://www.cisa.gov/news-events/ics-medical-advisories/i...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.