VULNERABILITY INTELLIGENCE

CVE-2018-5446

CVSS score4.9 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2018-05-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Description

Medtronic 2090 CareLink Programmer uses a per-product username and password that is stored in a recoverable format.

Weakness classification

  • CWE-257: Storing Passwords in a Recoverable Format
  • CWE-522: Insufficiently Protected Credentials

Primary references