CVE-2020-27252 PoC — Medtronic MyCareLink Smart Time-of-check Time-of-use Race Condition

Source

https://github.com/OccultSlolem/GatorMed

Associated Vulnerability

Title:Medtronic MyCareLink Smart Time-of-check Time-of-use Race Condition (CVE-2020-27252)
Description:Medtronic MyCareLink Smart 25000 is vulnerable to a race condition in the MCL Smart Patient Reader software update system, which allows unsigned firmware to be uploaded and executed on the Patient Reader. If exploited, an attacker could remotely execute code on the MCL Smart Patient Reader device, leading to control of the device.

Description

A simulation of CVE-2020-27252 for CSC699.

Readme

# React + TypeScript + Vite

This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.

Currently, two official plugins are available:

- [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/README.md) uses [Babel](https://babeljs.io/) for Fast Refresh
- [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react-swc) uses [SWC](https://swc.rs/) for Fast Refresh

## Expanding the ESLint configuration

If you are developing a production application, we recommend updating the configuration to enable type aware lint rules:

- Configure the top-level `parserOptions` property like this:

```js
export default {
  // other rules...
  parserOptions: {
    ecmaVersion: 'latest',
    sourceType: 'module',
    project: ['./tsconfig.json', './tsconfig.node.json'],
    tsconfigRootDir: __dirname,
  },
}
```

- Replace `plugin:@typescript-eslint/recommended` to `plugin:@typescript-eslint/recommended-type-checked` or `plugin:@typescript-eslint/strict-type-checked`
- Optionally add `plugin:@typescript-eslint/stylistic-type-checked`
- Install [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react) and add `plugin:react/recommended` & `plugin:react/jsx-runtime` to the `extends` list

File Snapshot


 [4.0K]  /data/pocs/73e12332373524bb3acf91132717b805e9df0b71
├── [ 685]  index.html
├── [1.0K]  LICENSE.md
├── [ 967]  package.json
├── [187K]  package-lock.json
├── [4.0K]  public
│   ├── [ 17K]  favicon.png
│   └── [435K]  pacemaker.png
├── [1.3K]  README.md
├── [4.0K]  src
│   ├── [ 15K]  App.tsx
│   ├── [4.0K]  assets
│   │   └── [4.0K]  react.svg
│   ├── [   0]  index.css
│   ├── [1.2K]  Layout.tsx
│   ├── [ 946]  main.tsx
│   └── [  38]  vite-env.d.ts
├── [ 605]  tsconfig.json
├── [ 233]  tsconfig.node.json
└── [ 163]  vite.config.ts

3 directories, 16 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!