https://vulnogram.org/ Most recent CVEs assigned by Medtronic (medtronic). https://vulnogram.org/seaview/icons/medtronic.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2025-4397 https://vulnogram.org/CVE-2025-4397 Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data. Medium Thu, 07 May 2026 15:03:35 GMT https://vulnogram.org/CVE-2025-4386 https://vulnogram.org/CVE-2025-4386 Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal.​ Medium Thu, 07 May 2026 15:00:21 GMT https://vulnogram.org/CVE-2025-12997 https://vulnogram.org/CVE-2025-12997 Insecure Direct Object Reference vulnerability in Medtronic CareLink Network which allows an authenticated attacker with access to specific device and user information to submit web requests to an API endpoint that would expose sensitive user informa… Low Thu, 04 Dec 2025 20:04:26 GMT https://vulnogram.org/CVE-2025-12996 https://vulnogram.org/CVE-2025-12996 Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from errors logged under certain circumstances. This issue affects CareLink Network: before December 4, 2025. Medium Thu, 04 Dec 2025 20:04:02 GMT https://vulnogram.org/CVE-2025-12995 https://vulnogram.org/CVE-2025-12995 Medtronic CareLink Network allows an unauthenticated remote attacker to perform a brute force attack on an API endpoint that could be used to determine a valid password under certain circumstances. This issue affects CareLink Network: before December… High Network Exploitable Thu, 04 Dec 2025 20:03:00 GMT https://vulnogram.org/CVE-2025-12994 https://vulnogram.org/CVE-2025-12994 Medtronic CareLink Network allows an unauthenticated remote attacker to initiate a request for security questions to an API endpoint that could be used to determine a valid user account. This issue affects CareLink Network: before December 4, 2025. Medium Network Exploitable Thu, 04 Dec 2025 20:02:06 GMT https://vulnogram.org/CVE-2025-4395 https://vulnogram.org/CVE-2025-4395 Medtronic MyCareLink Patient Monitor has a built-in user account with an empty password, which allows an attacker with physical access to log in with no password and access modify system functionality. This issue affects MyCareLink Patient Monitor mo… Medium Thu, 24 Jul 2025 03:30:24 GMT https://vulnogram.org/CVE-2025-4394 https://vulnogram.org/CVE-2025-4394 Medtronic MyCareLink Patient Monitor uses an unencrypted filesystem on internal storage, which allows an attacker with physical access to read and modify files. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 202… Medium Thu, 24 Jul 2025 03:26:06 GMT https://vulnogram.org/CVE-2025-4393 https://vulnogram.org/CVE-2025-4393 Medtronic MyCareLink Patient Monitor has an internal service that deserializes data, which allows a local attacker to interact with the service by crafting a binary payload to crash the service or elevate privileges. This issue affects MyCareLink Pat… Medium Thu, 24 Jul 2025 03:22:20 GMT https://vulnogram.org/CVE-2023-31222 https://vulnogram.org/CVE-2023-31222 Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac devic… Critical Network Exploitable Thu, 29 Jun 2023 15:19:22 GMT https://vulnogram.org/CVE-2023-25931 https://vulnogram.org/CVE-2023-25931 Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control… Medium Wed, 01 Mar 2023 18:56:30 GMT https://vulnogram.org/CVE-2022-32537 https://vulnogram.org/CVE-2022-32537 A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal prox… Medium Thu, 17 Nov 2022 20:47:05 GMT