{"id":"CVE-2018-10622","aliases":["EUVD-2018-2694","GHSA-h42x-qcjr-3ww7"],"status":"published","title":"Medtronic MyCareLink Patient Monitor Network Credential Weakness","description":"Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication.","severity":{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00364,"percentile":0.30425,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-257","CWE-313","CWE-522"],"published":"2018-08-10T18:00:00Z","modified":"2026-06-22T21:16:22Z","products":[{"vendor":"medtronic","product":"24950 mycarelink monitor"},{"vendor":"medtronic","product":"24952 mycarelink monitor"},{"vendor":"medtronic","product":"mycarelink_24950_patient_monitor_firmware"},{"vendor":"medtronic","product":"mycarelink_24952_patient_monitor_firmware"}],"references":[{"url":"https://global.medtronic.com/xg-en/product-security/security-bulletins/mycarelink-8-7-18.html"},{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-219-01"},{"url":"http://www.securityfocus.com/bid/105042","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2018/icsma-18-219-01.json"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10622"},{"url":"https://github.com/advisories/GHSA-h42x-qcjr-3ww7"}],"sources":{"cve":[{"id":"CVE-2018-10622","title":"Medtronic MyCareLink Patient Monitor Network Credential Weakness","description":"Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication.","status":"published","published":"2018-08-10T18:00:00Z","modified":"2026-06-22T20:42:16.327Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-313"],"updated_at":"2026-11-02T14:35:01.28843Z"}],"euvd":[{"id":"EUVD-2018-2694","description":"Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication.","status":"published","published":"2018-08-10T18:00:00Z","modified":"2026-06-22T20:42:16Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:33.850201Z"}],"ghsa":[{"id":"GHSA-h42x-qcjr-3ww7","title":"A vulnerability was discovered in all versions of Medtronic MyCareLink 24950 and 24952 Patient...","description":"A vulnerability was discovered in all versions of Medtronic MyCareLink 24950 and 24952 Patient Monitor. The affected products use per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication and encryption of local data at rest.","status":"published","published":"2022-05-13T01:34:59Z","modified":"2026-05-19T18:32:01Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-257","CWE-313","CWE-522"],"updated_at":"2026-11-02T15:08:12.634242Z"}],"nvd":[{"id":"CVE-2018-10622","description":"Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication.","status":"published","published":"2018-08-10T18:29:00.23Z","modified":"2026-06-22T21:16:22.553Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-313","CWE-522"],"updated_at":"2026-11-02T14:04:35.310988Z"}]}}