CVE-2025-4395 — Medtronic MyCareLink Patient Monitor Empty Password Vulnerability
Medtronic MyCareLink Patient Monitor has a built-in user account with an empty password, which allows an attacker with physical access to log in with no password and access modi…
Published: 2025-07-24 · CVSS: 6.8 · CVSS 3.1
Medtronic MyCareLink Patient Monitor has a built-in user account with an empty password, which allows an attacker with physical access to log in with no password and access modify system functionality. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7