Description
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Medtronic MyCareLink Patient Monitor 24950
Default version status: unaffected
0 to < February 25, 2026affected
Medtronic MyCareLink Patient Monitor 24952
Default version status: unaffected
0 to < February 25, 2026affected
References
- https://www.medtronic.com/en-us/e/product-security/security-bulletins/mycarelink-patient-monitor-vulnerabilities.html ↗
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-205-01 ↗
- https://www.medtronic.com/en-us/e/product-security/security-bulletins/mycarelink-8-7-18.html ↗
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-219-01 ↗