description: A vulnerability was discovered in all versions of Medtronic MyCareLink 24950 and 24952 Patient Monitor. The affected products use per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication and encryption of local data at rest.
problem types: STORING PASSWORDS IN A RECOVERABLE FORMAT CWE-257
affected:
{
product: Medtronic MyCareLink 24950, 24952 Patient Monitor
vendor: ICS-CERT
versions:
status: affected, version: All versions
}