Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7jf7-367c-mvv4

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

Medtronic MyCareLink Patient Monitor, 24950 MyCareLink Monitor, all versions, and 24952 MyCareLink Monitor, all versions contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to the operating system.

Medtronic MyCareLink Patient Monitor, 24950 MyCareLink Monitor, all versions, and 24952 MyCareLink Monitor, all versions contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to the operating system.

EPSS

Процентиль: 13%
0.00044
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-259
CWE-798

Связанные уязвимости

CVSS3: 6.4
nvd
больше 7 лет назад

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to the operating system.

EPSS

Процентиль: 13%
0.00044
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-259
CWE-798