Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-64pp-r5x2-fgff

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.9

Описание

An issue was discovered in St. Jude Medical Merlin@home, versions prior to Version 8.2.2 (RF models: EX1150; Inductive models: EX1100; and Inductive models: EX1100 with MerlinOnDemand capability). The identities of the endpoints for the communication channel between the transmitter and St. Jude Medical's web site, Merlin.net, are not verified. This may allow a man-in-the-middle attacker to access or influence communications between the identified endpoints.

An issue was discovered in St. Jude Medical Merlin@home, versions prior to Version 8.2.2 (RF models: EX1150; Inductive models: EX1100; and Inductive models: EX1100 with MerlinOnDemand capability). The identities of the endpoints for the communication channel between the transmitter and St. Jude Medical's web site, Merlin.net, are not verified. This may allow a man-in-the-middle attacker to access or influence communications between the identified endpoints.

EPSS

Процентиль: 54%
0.00318
Низкий

8.9 High

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 8.9
nvd
почти 9 лет назад

An issue was discovered in St. Jude Medical Merlin@home, versions prior to Version 8.2.2 (RF models: EX1150; Inductive models: EX1100; and Inductive models: EX1100 with MerlinOnDemand capability). The identities of the endpoints for the communication channel between the transmitter and St. Jude Medical's web site, Merlin.net, are not verified. This may allow a man-in-the-middle attacker to access or influence communications between the identified endpoints.

EPSS

Процентиль: 54%
0.00318
Низкий

8.9 High

CVSS3

Дефекты

CWE-476