CVE-2018-8849

Medtronic N'Vision Clinician Programmer 8840 N'Vision Clinician Programme and 8870 N'Vision removable Application Card do not encrypt PII and PHI while at rest.

Score

CVSS 3.1 4.6 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-05-18

Last modified

2025-06-27

Weaknesses

CWE-311

Affected products

• 8870 Nvision Removable Application Card (Medtronic)
• N'vision 8840 Firmware (Medtronic)
• N'vision 8870 Firmware (Medtronic)
• Nvision Clinician Programmer (Medtronic)

References

• http://www.medtronic.com/content/dam/medtronic-com/us-en/corporate/documents/Medtronic-NVision-8840_Security-Bulletin_F…
• http://www.securityfocus.com/bid/104213
• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-137-01
• https://www.medtronic.com/security
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01