CVE-2018-10626

MEDIUM Year: 2018
CVSS v3 Score
4.4
Medium
CVSS v2 Score
3.8
Low
Weakness Type
CWE-345
View all →

Vulnerability Description

Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An attacker who obtains per-product credentials from the monitor and paired implantable cardiac device information can potentially upload invalid data to the Medtronic CareLink network.

Related Vulnerabilities

CVE-2016-3016

MEDIUM
CVSS:4.4(Medium)

IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code, which could allow an authenticated attacker ...

CWE-3452016

CVE-2019-16000

MEDIUM
CVSS:4.4(Medium)

A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted de...

CWE-3452019

CVE-2019-1880

MEDIUM
CVSS:4.4(Medium)

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System (UCS) C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affect...

CWE-3452019

CVE-2021-26368

MEDIUM
CVSS:4.4(Medium)

Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to unmap memory owned by a higher privileged process resulting in...

CWE-3452021

CVE-2021-26396

MEDIUM
CVSS:4.4(Medium)

Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.

CWE-3452021

CVE-2017-7674

MEDIUM
CVSS:4.3(Medium)

The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origi...

CWE-3452017