Medtronic MyCareLink Patient Monitor User Account Vulnerability Allowing Unauthorized Access

A vulnerability exists in the Medtronic MyCareLink Patient Monitor models 24950 and 24952, prior to June 25, 2025. The issue arises from a built-in user account that has an empty password, enabling an attacker with physical access to log in without a password and modify system functionality.

Impact

Exploitation of this vulnerability allows unauthorized users to gain access to the device and modify system functions.