Approved changes feed: RSS · Atom

cpe:2.3:a:medtronic:mycarelink_patient_monitor_24950:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMedtronic (39ade870-5d3b-575a-9a52-512cca95c641)
ProductMycarelink Patient Monitor 24950 (a2234761-1365-53c6-b7db-d0aa80142262)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4397 vulnerable 2026-06-08 07:29:16.206779 Medtronic MyCareLink Patient Monitor Data Encryption Weakness
MEDIUM (6.8)
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data.
Published: 2026-05-07T15:03:35.674Z
Updated: 2026-05-07T15:45:18.202Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4395 vulnerable 2026-06-08 07:29:16.203175 Medtronic MyCareLink Patient Monitor Empty Password Vulnerability
MEDIUM (6.8)
Medtronic MyCareLink Patient Monitor has a built-in user account with an empty password, which allows an attacker with physical access to log in with no password and access modify system functionality. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025
Published: 2025-07-24T03:30:24.185Z
Updated: 2026-03-27T20:10:12.703Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4394 vulnerable 2026-06-08 07:29:16.202760 Medtronic MyCareLink Patient Monitor Unencrypted Filesystem Vulnerability
MEDIUM (6.8)
Medtronic MyCareLink Patient Monitor uses an unencrypted filesystem on internal storage, which allows an attacker with physical access to read and modify files. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025
Published: 2025-07-24T03:26:06.706Z
Updated: 2026-03-27T19:40:02.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4393 vulnerable 2026-06-08 07:29:16.202291 Medtronic MyCareLink Patient Monitor Deserialization Vulnerability
MEDIUM (6.5)
Medtronic MyCareLink Patient Monitor has an internal service that deserializes data, which allows a local attacker to interact with the service by crafting a binary payload to crash the service or elevate privileges. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025
Published: 2025-07-24T03:22:20.208Z
Updated: 2026-03-27T19:38:42.742Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4386 vulnerable 2026-06-08 07:29:16.186768 Medtronic MyCareLink Patient Monitor Hardware Debug Port
MEDIUM (6.8)
Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal.​
Published: 2026-05-07T15:00:21.310Z
Updated: 2026-05-07T15:43:39.136Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.