Medtronic MyCareLink Patient Monitor (Update A)
Successful exploitation of these vulnerabilities could lead to system compromise, unauthorized access to sensitive data, and manipulation of the monitor's functionality.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-4397US | — | — | ||
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data. | ||||
| CVE-2025-4386US | — | — | ||
Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal. | ||||
| CVE-2025-4395US | — | — | ||
Medtronic MyCareLink Patient Monitor has a built-in user account with an empty password, which allows an attacker with physical access to log in with no password and access modify… | ||||
| CVE-2025-4394US | —OT erhöht | — | ||
Medtronic MyCareLink Patient Monitor uses an unencrypted filesystem on internal storage, which allows an attacker with physical access to read and modify files.
This issue affect… | ||||
| CVE-2025-4393US | — | — | ||
Medtronic MyCareLink Patient Monitor has an internal service that deserializes data, which allows a local attacker to interact with the service by crafting a binary payload to cras… | ||||
| CVE-2018-10622US | high7.1 | — | ||
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSMA-25-205-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSMA-25-205-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (12)
- MitigationMyCareLink Patient Monitor model 24950
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24950
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24950
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24950
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24950
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24950
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24952
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24952
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24952
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24952
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24952
Medtronic recommends the following actions:
- MitigationMyCareLink Patient Monitor model 24952
Medtronic recommends the following actions:
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan