Medtronic MyCareLink Patient Monitor vulnerabilities

Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data.

Medtronic MyCareLink Patient Monitor has an internal serial interface that allows an attacker with physical access to reach a login prompt via a UART terminal. The vulnerability requires physical access to the device.

The Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication.