Medical Devices
Information Disclosure
Lack of Medical data encryption and integrity in Niscomed Multipara Patient Monitor
Lack of User’s Medical data encryption and integrity An issue was discovered on Nescomed Multipara Monitor M1000 devices.
.png)
Overview
Lack of User’s Medical data encryption and integrity
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory stores data in cleartext, without integrity protection against tampering. This data can be accessed using CVE-2020-15482/CVE-2020-15483 and tamper with the user’s medical data.
Vulnerability details
Lack of User’s Medical data encryption and integrity An issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory stores data in cleartext, without integrity protection against tampering.
Disclosure timeline
2020-06-22 reported to the vendor
2020-07-22 No response from the vendor and Public disclosure.
References
2026-06-17 (NVD record)
Credits
Arun Magesh
Related Advisories
jscript.dll - ActiveXObject BSTR - Use After Free
Adobe Reader Out-Of-Bounds Read Information Disclosure Vulnerability
Opera Mini Location Permission Spoof
Concerned about a similar issue in your product?
Payatu's researchers find these vulnerabilities before attackers do. Talk to us about product, firmware and IoT security testing.
