CVE-2025-4397
Medium · 6.8CVSS
6.8
EPSS
0.1%
Published
May 7, 2026
CISA due date
—
The record
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-14663 Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover… CWE-313
- CVE-2026-8804 Puppet resource_api (shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and… CWE-313
- CVE-2026-52783 OpenProject is open-source, web-based project management software. CWE-313
- CVE-2026-24349 A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All… CWE-313
- CVE-2026-6796 A vulnerability was determined in Sanluan PublicCMS up to 6.202506.d. CWE-313
- CVE-2026-6598 A security vulnerability has been detected in langflow-ai langflow up to 1.8.3. CWE-313
- CVE-2026-5531 A vulnerability has been found in SourceCodester Student Result Management System 1.0. CWE-313
- CVE-2025-64305 MicroServer copies parts of the system firmware to an unencrypted external SD card on… CWE-313