CVE-2018-8849: Medtronic N'vision 8840 Firmware

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Medtronic N'Vision Clinician Programmer 8840 N'Vision Clinician Programme and 8870 N'Vision removable Application Card do not encrypt PII and PHI while at rest.

Affected products

• Medtronic N'vision 8840 Firmware: affected versions not specified
• Medtronic N'vision 8870 Firmware: affected versions not specified

Published 2018-05-18. Last modified 2026-06-17.