CVE-2018-18984

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

Medtronic CareLink and Encore Programmers

do not encrypt or do not sufficiently encrypt sensitive PII and PHI information while at rest .

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-311CWE-312

Affected software

No affected versions have been published.

Timeline

Published
Dec 14, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-189855.4Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2CVE-2018-189867.8LCDS Laquis SCADA prior to version 4.1.0.4150 allows the opening of a specially crafted report format file that may cause an out of bounds rCVE-2018-189878.8VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file without first checking for CVE-2018-189888.8LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may alCVE-2018-189897.8In CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior), when processing project fCVE-2018-18994.3IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the settings related to InfoSphere Business CVE-2018-189905.3LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can levCVE-2018-189916.1Reflected cross-site scripting (non-persistent) in SCADA WebServer (Versions prior to 2.03.0001) could allow an attacker to send a crafted UCVE-2018-189928.8LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper sanitation, which may allow an attacker to execute CVE-2018-189937.8Two stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prioCVE-2018-189947.1LCDS Laquis SCADA prior to version 4.1.0.4150 allows an out of bounds read when opening a specially crafted project file, which may cause a CVE-2018-189959.8Pluto Safety PLC Gateway Ethernet devices ABB GATE-E1 and GATE-E2 all versions do not allow authentication to be configured on administrativ
CVE-2018-18984: Medium severity, CVSS 4.6 | Vulnix