CVE-2018-5448

4.8 mediumEPSS 0.7%

Medtronic 2090 CareLink Programmer’s software deployment network contains a directory traversal vulnerability that could allow an attacker to read files on the system.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWEs: CWE-22, CWE-23
Published: 2018-05-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

medtronic:2090_carelink_programmer_firmware

References

https://global.medtronic.com/xg-en/product-security/security-bulletins/carelink-2090-29901.html
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-058-01
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-01

Check your stack JSON