Описание
Medtronic CareLink Network allows an unauthenticated remote attacker to perform a brute force attack on an API endpoint that could be used to determine a valid password under certain circumstances. This issue affects CareLink Network: before December 4, 2025.
Уязвимые конфигурации
Конфигурация 1Версия до 2025-12-04 (исключая)
cpe:2.3:a:medtronic:carelink_network:*:*:*:*:*:*:*:*
EPSS
Процентиль: 31%
0.00121
Низкий
8.1 High
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-307
Связанные уязвимости
CVSS3: 8.1
github
2 месяца назад
Medtronic CareLink Network allows an unauthenticated remote attacker to perform a brute force attack on an API endpoint that could be used to determine a valid password under certain circumstances. This issue affects CareLink Network: before December 4, 2025.
EPSS
Процентиль: 31%
0.00121
Низкий
8.1 High
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-307