CVE-2025-12996CWE-532

CVE-2025-12996

Medium · published December 5, 2025

CVSS v3.1
4.1
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from errors logged under certain circumstances. This issue affects CareLink Network: before December 4, 2025.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00109 · 1.2th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-12-05T01:16Z
Affected products (1)
ProductVersionsFixed in
medtronic/carelink_network< 2025-12-042025-12-04
References (1)
https://www.medtronic.com/en-us/e/product-security/security-bulletins/carelink-network-vulnerabilities.html · [email protected]
EPSS history
Timeline
  • 04 DEC 20:04Z
    Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from errors logged under…
    cvelistv5