# cve.now: Medtronic

The newest entries naming Medtronic as an affected vendor (up to 200), of 34 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2025-4397](https://cve.now/CVE-2025-4397.md): Medtronic MyCareLink Patient Monitor Data Encryption Weakness (CVSS 6.8)
- [CVE-2025-4386](https://cve.now/CVE-2025-4386.md): Medtronic MyCareLink Patient Monitor Hardware Debug Port (CVSS 6.8)
- [CVE-2025-12997](https://cve.now/CVE-2025-12997.md): Insecure Direct Object Reference vulnerability in Medtronic CareLink Network which allows an authenticated attacker with access to specific (CVSS 2.2)
- [CVE-2025-12996](https://cve.now/CVE-2025-12996.md): Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from error (CVSS 4.1)
- [CVE-2025-12995](https://cve.now/CVE-2025-12995.md): Medtronic CareLink Network allows an unauthenticated remote attacker to perform a brute force attack on an API endpoint that could be used t (CVSS 8.1)
- [CVE-2025-12994](https://cve.now/CVE-2025-12994.md): Medtronic CareLink Network allows an unauthenticated remote attacker to initiate a request for security questions to an API endpoint that co (CVSS 5.3)
- [CVE-2025-4395](https://cve.now/CVE-2025-4395.md): Medtronic MyCareLink Patient Monitor Empty Password Vulnerability (CVSS 6.8)
- [CVE-2025-4394](https://cve.now/CVE-2025-4394.md): Medtronic MyCareLink Patient Monitor Unencrypted Filesystem Vulnerability (CVSS 6.8)
- [CVE-2025-4393](https://cve.now/CVE-2025-4393.md): Medtronic MyCareLink Patient Monitor Deserialization Vulnerability (CVSS 6.5)
- [CVE-2023-31222](https://cve.now/CVE-2023-31222.md): Medtronic Paceart MSMQ Deserialization of Untrusted Data (CVSS 9.8)
- [CVE-2023-25931](https://cve.now/CVE-2023-25931.md): Medtronic Micro Clinician & InterStim X Clinician App Password Reset Issue (CVSS 6.4)
- [CVE-2022-32537](https://cve.now/CVE-2022-32537.md): Medtronic MiniMed 600 Series Pump System Communication Issue (CVSS 4.8)
- [CVE-2020-27252](https://cve.now/CVE-2020-27252.md): Medtronic MyCareLink Smart Time-of-check Time-of-use Race Condition (CVSS 8.8)
- [CVE-2020-25187](https://cve.now/CVE-2020-25187.md): Medtronic MyCareLink Smart Heap-based Buffer Overflow (CVSS 8.8)
- [CVE-2020-25183](https://cve.now/CVE-2020-25183.md): Medtronic MyCareLink Smart Improper Authentication (CVSS 8.0)
- [CVE-2019-13531](https://cve.now/CVE-2019-13531.md): Medtronic Valleylab FT10 and LS10 Improper Authentication (CVSS 4.8)
- [CVE-2019-13535](https://cve.now/CVE-2019-13535.md): Medtronic Valleylab FT10 and LS10 Protection Mechanism Failure (CVSS 4.6)
- [CVE-2019-13539](https://cve.now/CVE-2019-13539.md): Medtronic Valleylab FT10 and FX8 Reversible One-way Hash (CVSS 7.0)
- [CVE-2019-13543](https://cve.now/CVE-2019-13543.md): Medtronic Valleylab FT10 and FX8 Use of Hard-coded Credentials (CVSS 5.8)
- [CVE-2019-10964](https://cve.now/CVE-2019-10964.md): Medtronic MiniMed 508 and Paradigm Series Insulin Pumps Improper Access Control (CVSS 7.1)
- [CVE-2019-6540](https://cve.now/CVE-2019-6540.md): Medtronic Conexus Radio Frequency Telemetry Protocol Cleartext Transmission of Sensitive Information (CVSS 6.5)
- [CVE-2019-6538](https://cve.now/CVE-2019-6538.md): Medtronic Conexus Radio Frequency Telemetry Protocol Improper Access Control (CVSS 9.3)
- [CVE-2018-18984](https://cve.now/CVE-2018-18984.md): Medtronic 9790, 2090 CareLink, and 29901 Encore Programmers Missing Encryption of Sensitive Data (CVSS 4.6)
- [CVE-2018-14781](https://cve.now/CVE-2018-14781.md): Medtronic MiniMed MMT-500/MMT-503 Remote Controllers Authentication Bypass by Capture-replay (CVSS 5.3)
- [CVE-2018-10634](https://cve.now/CVE-2018-10634.md): Medtronic MiniMed MMT-500/MMT-503 Remote Controllers Cleartext Transmission of Sensitive Information (CVSS 4.8)
- [CVE-2018-10626](https://cve.now/CVE-2018-10626.md): Medtronic MyCareLink 24950 Patient Monitor Insufficient Verification of Data Authenticity (CVSS 4.4)
- [CVE-2018-10622](https://cve.now/CVE-2018-10622.md): Medtronic MyCareLink Patient Monitor Network Credential Weakness (CVSS 5.2)
- [CVE-2018-10631](https://cve.now/CVE-2018-10631.md): Medtronic N'Vision Clinician Programmer Protection Mechanism Failure (CVSS 6.3)
- [CVE-2018-8870](https://cve.now/CVE-2018-8870.md): Medtronic MyCareLink Patient Monitor Use of Hard-coded Password (CVSS 6.4)
- [CVE-2018-8868](https://cve.now/CVE-2018-8868.md): Medtronic MyCareLink Patient Monitor Exposed Dangerous Method or Function (CVSS 6.2)
- [CVE-2018-10596](https://cve.now/CVE-2018-10596.md): Medtronic 2090 Carelink Programmer Improper Restriction of Communication Channel to Intended Endpoints (CVSS 7.1)
- [CVE-2018-8849](https://cve.now/CVE-2018-8849.md): Medtronic N'Vision Clinician Programmer Missing Encryption of Sensitive Data (CVSS 4.6)
- [CVE-2018-5448](https://cve.now/CVE-2018-5448.md): Medtronic 2090 Carelink Programmer Relative Path Traversal (CVSS 4.8)
- [CVE-2018-5446](https://cve.now/CVE-2018-5446.md): Medtronic 2090 Carelink Programmer Storing Passwords in a Recoverable Format (CVSS 4.9)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/medtronic
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.