Browse CVEs

CRITICAL 9.8 CVE-2025-12995 Medtronic CareLink Network allows an unauthenticated remote attacker to perform a brute force attack on an API endpoint that could be used to determi… Carelink Network 2025-12-04+ Fix from $2,3002025-12-04 MEDIUM 5.3 CVE-2025-12994 Medtronic CareLink Network allows an unauthenticated remote attacker to initiate a request for security questions to an API endpoint that could be us… Carelink Network 2025-12-04+ Fix from $1,6002025-12-04 HIGH 8.8 CVE-2023-31222EPSS 28% Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an… Paceart Optima 1.12+ Fix from $1,9502023-06-29 MEDIUM 6.8 CVE-2023-25931 Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability … Interstim X Clinician Mitigation only Fix from $1,6002023-03-01 CRITICAL 9.8 CVE-2020-25187 Medtronic MyCareLink Smart 25000 is  vulnerable when an authenticated attacker runs a debug command, which can be sent to the patient reader and ca… Mycarelink Smart Model 25000 Firmware Mitigation only Fix from $2,3002020-12-14 HIGH 8.8 CVE-2020-25183 Medtronic MyCareLink Smart 25000 contains an authentication protocol vulnerability where the method used to authenticate between the MCL Smart Pati… Mycarelink Smart Model 25000 Firmware Mitigation only Fix from $1,9502020-12-14 HIGH 8.1 CVE-2020-27252 Medtronic MyCareLink Smart 25000 is vulnerable to a race condition in the MCL Smart Patient Reader software update system, which allows unsigned fi… Mycarelink Smart Model 25000 Firmware Mitigation only Fix from $1,9502020-12-14 HIGH 7.8 CVE-2019-13539 Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab… Valleylab Exchange Client after 4.0.0 Fix from $1,9502019-11-08 HIGH 7.5 CVE-2019-13543 Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab… Valleylab Exchange Client after 4.0.0 Fix from $1,9502019-11-08 HIGH 7.1 CVE-2019-10964 Medtronic MiniMed Insulin Pumps are designed to communicate using a wireless RF with other devices, such as blood glucose meters, glucose sensor tr… Minimed 508 Firmware Mitigation only Fix from $1,9502019-06-28 MEDIUM 6.5 CVE-2019-6540 The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 P… Mycarelink Monitor 24950 Firmware Mitigation only Fix from $1,6002019-03-26 MEDIUM 6.5 CVE-2019-6538 The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 P… Mycarelink Monitor Firmware Mitigation only Fix from $1,6002019-03-25 MEDIUM 5.2 CVE-2018-10622 Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for … Mycarelink 24952 Patient Monitor Firmware Mitigation only Fix from $1,6002018-08-10 MEDIUM 6.3 CVE-2018-10631 The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Applicatio… N\'vision 8840 Firmware Mitigation only Fix from $1,6002018-07-13 MEDIUM 6.4 CVE-2018-8870 Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can… 24950 Mycarelink Monitor Firmware Mitigation only Fix from $1,6002018-07-03 MEDIUM 6.2 CVE-2018-8868 Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains debug code meant to test the functionality of the monitor's communication in… 24950 Mycarelink Monitor Firmware Mitigation only Fix from $1,6002018-07-03 HIGH 7.1 CVE-2018-10596 Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates. It does not verify it is still connected… 2090 Carelink Programmer Firmware Mitigation only Fix from $1,9502018-07-03