CVE-2018-10622
MediumCVSS 5.2Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
The Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication.
Risk Assessment
The risk is that unauthorized users may gain access to the network, potentially compromising patient privacy and data security.
Recommendation
It is recommended to implement stronger credential protection mechanisms and regularly update the system to minimize risk.
Other vulnerabilities in Medtronic MyCareLink Patient Monitor
See all- CVE-2025-4397Medium
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data.
- CVE-2025-4386Medium
Medtronic MyCareLink Patient Monitor has an internal serial interface that allows an attacker with physical access to reach a login prompt via a UART terminal. The vulnerability requires physical access to the device.
Original NVD description (English source)
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS