CVE-2025-4394

—

CVSS 3.1

6.8 medium

EPSS

<1%p9

Published

Jul 24, 2025 (Jul 24, 2025)

Modified

Jun 17, 2026

Description

Medtronic MyCareLink Patient Monitor uses an unencrypted filesystem on internal storage, which allows an attacker with physical access to read and modify files. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025

Weakness: CWE-312
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.