Medtronic MyCareLink Patient Monitor (Update A)
Successful exploitation of these vulnerabilities could lead to system compromise, unauthorized access to sensitive data, and manipulation of the monitor's functionality.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-4397US | — | — | ||
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data. | ||||
| CVE-2025-4386US | — | — | ||
Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal. | ||||
| CVE-2025-4395US | — | — | ||
Medtronic MyCareLink Patient Monitor has a built-in user account with an empty password, which allows an attacker with physical access to log in with no password and access modify… | ||||
| CVE-2025-4394US | —OT elevated | — | ||
Medtronic MyCareLink Patient Monitor uses an unencrypted filesystem on internal storage, which allows an attacker with physical access to read and modify files.
This issue affect… | ||||
| CVE-2025-4393US | — | — | ||
Medtronic MyCareLink Patient Monitor has an internal service that deserializes data, which allows a local attacker to interact with the service by crafting a binary payload to cras… | ||||
| CVE-2018-10622US | high7.1 | — | ||
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSMA-25-205-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSMA-25-205-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (12)
- MitigationMyCareLink Patient Monitor model 24950
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24950
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24950
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24950
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24950
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24950
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24952
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24952
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24952
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24952
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24952
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24952
Medtronic recommends the following actions:
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan