Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2025-4397
PUBLISHED
More InfoOfficial Page
Assigner-Medtronic
Assigner Org ID-3c337f33-b2bd-4529-9792-f48cdb2838b4
View Known Exploited Vulnerability (KEV) details
Published At-07 May, 2026 | 15:03
Updated At-07 May, 2026 | 15:45
Rejected At-
▼CVE Numbering Authority (CNA)
Medtronic MyCareLink Patient Monitor Data Encryption Weakness

Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data.

Affected Products
Vendor
Medtronic
Product
MyCareLink Patient Monitor 24950
Default Status
unaffected
Versions
Affected
  • From 0 before February 25, 2026 (custom)
Vendor
Medtronic
Product
MyCareLink Patient Monitor 24952
Default Status
unaffected
Versions
Affected
  • From 0 before February 25, 2026 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-313CWE-313 Cleartext storage in a file or on disk
Type: CWE
CWE ID: CWE-313
Description: CWE-313 Cleartext storage in a file or on disk
Metrics
VersionBase scoreBase severityVector
3.16.8MEDIUM
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Version: 3.1
Base score: 6.8
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-49CAPEC-49 Password Brute Forcing
CAPEC ID: CAPEC-49
Description: CAPEC-49 Password Brute Forcing
Solutions
Configurations
Workarounds
Exploits
Credits
finder
Ethan Morchy, with Somerset Recon
finder
Carl Mann, independent researcher
finder
Billy Rios, Jesse Young, and Jonathan Butts of Whitescope LLC reported these vulnerabilities
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.medtronic.com/en-us/e/product-security/security-bulletins/mycarelink-patient-monitor-vulnerabilities.html
vendor-advisory
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-205-01
third-party-advisory
https://www.medtronic.com/en-us/e/product-security/security-bulletins/mycarelink-8-7-18.html
vendor-advisory
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-219-01
third-party-advisory
Hyperlink: https://www.medtronic.com/en-us/e/product-security/security-bulletins/mycarelink-patient-monitor-vulnerabilities.html
Resource:
vendor-advisory
Hyperlink: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-205-01
Resource:
third-party-advisory
Hyperlink: https://www.medtronic.com/en-us/e/product-security/security-bulletins/mycarelink-8-7-18.html
Resource:
vendor-advisory
Hyperlink: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-219-01
Resource:
third-party-advisory
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found