Back to Database
Status published
Medium
CVE-2018-5448
Medtronic 2090 Carelink Programmer Relative Path Traversal
Vulnerability Description
Medtronic 2090 CareLink Programmer’s software deployment network contains a directory traversal vulnerability that could allow an attacker to read files on the system.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-5448
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Billy Rios and Jonathan Butts of Whitescope LLC identified these vulnerabilities and reported them to CISA.
References
More from Medtronic
View All →CVE-2025-4397
Medtronic MyCareLink Patient Monitor Data Encryption Weakness
Medium
6.8
CVE-2025-4395
Medtronic MyCareLink Patient Monitor Empty Password Vulnerability
Medium
6.8
CVE-2025-4394
Medtronic MyCareLink Patient Monitor Unencrypted Filesystem Vulnerability
Medium
6.8
CVE-2025-4393
Medtronic MyCareLink Patient Monitor Deserialization Vulnerability
Medium
6.5
CVE-2025-4386
Medtronic MyCareLink Patient Monitor Hardware Debug Port
Medium
6.8
Affected Vendor
Medtronic
View all reports →Affected Software
2090 CareLink Programmer, 29901 Encore Programmer
Vulnerable Versions:
All versions
Timeline
Official Publish:
May 4th, 2018
Last Modified:
May 22nd, 2025
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N