Описание
Medtronic CareLink Network allows an unauthenticated remote attacker to initiate a request for security questions to an API endpoint that could be used to determine a valid user account. This issue affects CareLink Network: before December 4, 2025.
Уязвимые конфигурации
Конфигурация 1Версия до 2025-12-04 (исключая)
cpe:2.3:a:medtronic:carelink_network:*:*:*:*:*:*:*:*
EPSS
Процентиль: 15%
0.00048
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-204
Связанные уязвимости
CVSS3: 5.3
github
2 месяца назад
Medtronic CareLink Network allows an unauthenticated remote attacker to initiate a request for security questions to an API endpoint that could be used to determine a valid user account. This issue affects CareLink Network: before December 4, 2025.
EPSS
Процентиль: 15%
0.00048
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-204