CVE-2018-18984: Medtronic 29901 Encore Programmer Firmware

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Medtronic CareLink and Encore Programmers do not encrypt or do not sufficiently encrypt sensitive PII and PHI information while at rest .

Affected products

• Medtronic 29901 Encore Programmer Firmware: any version
• Medtronic Carelink 2090 Programmer Firmware: any version
• Medtronic Carelink 9790 Programmer Firmware: any version

Published 2018-12-14. Last modified 2026-06-17.