CVE-2025-4386

Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal.​

CVSS 3.1

6.8CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-25)

CWE

CWE-1263

Published

2026-05-07

Modified

2026-10-14

Record from

the NVD, synced 2026-10-19

References

• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-205-01
• https://www.medtronic.com/en-us/e/product-security/security-bulletins/mycarelink-patient-monitor-vulnerabilities.html

Check your stackJSON