CVE-2025-4394CWE-312

Medtronic MyCareLink Patient Monitor Unencrypted Filesystem Vulnerability

Medium · published July 24, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
9.3
In the wild
Unconfirmed
What it is

Medtronic MyCareLink Patient Monitor uses an unencrypted filesystem on internal storage, which allows an attacker with physical access to read and modify files.

This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.3th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2025-07-24T03:26Z
EPSS history
Timeline
  • 24 JUL 03:26Z
    Medtronic MyCareLink Patient Monitor Unencrypted Filesystem Vulnerability
    cvelistv5