Medtronic N'vision 8870 Firmware vulnerabilities

2 CVEs affecting Medtronic N'vision 8870 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-10631, published 2018-07-13.

More from Medtronic.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-10631, published 2018-07-13. Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days. The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can…
• CVE-2018-8849, published 2018-05-18. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. Medtronic N'Vision Clinician Programmer 8840 N'Vision Clinician Programme and 8870 N'Vision removable Application Card do not encrypt PII and PHI while at rest.