description: Medtronic MyCareLink Smart 25000 all versions are vulnerable when an attacker who gains auth runs a debug command, which is sent to the reader causing heap overflow in the MCL Smart Reader stack. A heap overflow allows attacker to remotely execute code on the MCL Smart Reader, could lead to control of device.
problem types: HEAP-BASED BUFFER OVERFLOW CWE-122
affected:
{
product: Medtronic MyCareLink Smart 25000 Reader
vendor: n/a
versions:
status: affected, version: Smart 25000 all versions
}