This CPE summary could be partial or incomplete. Please contact us for a detailed listing.

Summary

Detail
Vendor Medtronic First view 2019-03-26
Product Maximo Ii Crt-D Firmware Last view 2019-03-26
Version - Type Os
Update *  
Edition *  
Language *  
Sofware Edition *  
Target Software *  
Target Hardware *  
Other *  
 
CPE Product cpe:2.3:o:medtronic:maximo_ii_crt-d_firmware

Activity : Overall

Related : CVE

  Date Alert Description
6.5 2019-03-26 CVE-2019-6540

The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement encryption. An attacker with adjacent short-range access to a target product can listen to communications, including the transmission of sensitive data.

CWE : Common Weakness Enumeration

%idName
100% (1) CWE-319 Cleartext Transmission of Sensitive Information