Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3005▼ 85 respecto a la semana anterior
Críticas / altas1403▲ 41 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.1) | 1.3% | — | Medtronic 2090 Carelink Programmer Firmware | 3/7/2018 | 17/6/2026 | Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates. It does not verify it is still connected to this virtual private network before downloading updates. The affected products initially establish an encapsulated IP-based VPN connection to a Medtronic-hosted update… | |
| Modificada | Media (4.8) | 0.74% | — | Medtronic 2090 Carelink Programmer Firmware | 4/5/2018 | 17/6/2026 | Medtronic 2090 CareLink Programmer’s software deployment network contains a directory traversal vulnerability that could allow an attacker to read files on the system. | |
| Modificada | Media (4.9) | 0.39% | — | Medtronic 2090 Carelink Programmer Firmware | 4/5/2018 | 17/6/2026 | Medtronic 2090 CareLink Programmer uses a per-product username and password that is stored in a recoverable format. |