CVE:CVE-2018-18984
CNNVD:CNNVD-201812-661
Medtronic CareLink 9790 Programmer、CareLink 2090 Programmer和29901 Encore Programmer都是美国Medtronic公司的医疗设备编程软件。
Medtronic CareLink 9790 Programmer、CareLink 2090 Programmer和29901 Encore Programmer（全部版本）中存在安全漏洞，该漏洞源于受影响的产品未加密或未充分加密敏感信息。物理位置接近的攻击者可利用该漏洞访问存储在设备上的受保护的健康信息和个人身份信息。
solution:Upgrade medtronic carelink_2090_programmer_firmware to a higher version than *; Upgrade medtronic carelink_9790_programmer_firmware to a higher version than *; Upgrade medtronic 29901_encore_programmer_firmware to a higher version than *