CVE-2020-25187

Katalog CVE

CVSS 9.8 · Critical EPSS 3,9%

Kerentanan Heap-based Buffer Overflow pada medtronic mycarelink smart model 25000 firmware. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Medtronic MyCareLink Smart 25000 is  vulnerable when an authenticated attacker runs a debug command, which can be sent to the patient reader and cause a heap overflow event within the MCL Smart Patient Reader software stack. The heap overflow could allow an attacker to remotely execute code on the MCL Smart Patient Reader, potentially leading to control of the device

Rincian

Terbit di NVD

14 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-122: Heap-based Buffer Overflow
CWE-787: Out-of-bounds Write

EPSS (30 hari)

3,9% peluang dieksploitasi; lebih tinggi dari 90,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://us-cert.cisa.gov/ics/advisories/icsma-20-345-01 advisory pihak ketiga · pemerintah AS
• https://global.medtronic.com/xg-en/product-security/security-bulletins/mycarelink-smart-security-vulnerability...
• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-20-345-01