Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-25187

Опубликовано: 14 дек. 2020
Источник: nvd
CVSS3: 8.8
CVSS3: 9.8
CVSS2: 10
EPSS Низкий

Описание

Medtronic MyCareLink Smart 25000 is

 vulnerable when an authenticated attacker runs a debug command, which can be sent to the patient reader and cause a heap overflow event within the MCL Smart Patient Reader software stack. The heap overflow could allow an attacker to remotely execute code on the MCL Smart Patient Reader, potentially leading to control of the device

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:medtronic:mycarelink_smart_model_25000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:medtronic:mycarelink_smart_model_25000:-:*:*:*:*:*:*:*

EPSS

Процентиль: 79%
0.01274
Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-122
CWE-787

Связанные уязвимости

CVSS3: 9.8
github
больше 3 лет назад

Medtronic MyCareLink Smart 25000 all versions are vulnerable when an attacker who gains auth runs a debug command, which is sent to the reader causing heap overflow in the MCL Smart Reader stack. A heap overflow allows attacker to remotely execute code on the MCL Smart Reader, could lead to control of device.

EPSS

Процентиль: 79%
0.01274
Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-122
CWE-787