Description
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Medtronic 24950 MyCareLink Monitor
Default version status: unaffected
0 to < February 25, 2026affected
Medtronic 24952 MyCareLink Monitor
Default version status: unaffected
0 to < February 25, 2026affected
References
- https://global.medtronic.com/xg-en/product-security/security-bulletins/mycarelink-8-7-18.html ↗
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-219-01 ↗
- http://www.securityfocus.com/bid/105042 ↗
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2018/icsma-18-219-01.json ↗
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-01 ↗