CVE-2025-4386
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Medtronic MyCareLink Patient Monitor has an internal serial interface that allows an attacker with physical access to reach a login prompt via a UART terminal. The vulnerability requires physical access to the device.
Risk Assessment
A person with physical access to the monitor can reach the login interface, potentially enabling unauthorized manipulation of the device. The risk mainly affects environments where the device is not physically secured.
Recommendation
Restrict physical access to the Medtronic MyCareLink Patient Monitor to authorized personnel. Contact the manufacturer for guidance on securing the UART interface.
Other vulnerabilities in Medtronic MyCareLink Patient Monitor
See all- CVE-2025-4397Medium
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data.
- CVE-2018-10622Medium
The Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication.
Original NVD description (English source)
Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS