CVE-2025-4386

Published: May 7, 2026Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: security@medtronic.com (Secondary)

Description

Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal.

Related CWEs

CWE-1263

Improper Physical Access Control

The product is designed with access restricted to certain information, but it does not sufficiently protect against an unauthorized actor with physical access to these areas.

References (2)

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-205-01

Source: security@medtronic.com

https://www.medtronic.com/en-us/e/product-security/security-bulletins/mycarelink-patient-monitor-vulnerabilities.html

Source: security@medtronic.com

Timeline

No history available yet.