Skip to content
OpenAdvisories

Vendor

Medtronic

34 known vulnerabilities.

Products

MyCareLink Patient Monitor 24950 5 MyCareLink Patient Monitor 24952 5 Valleylab FT10 Energy Platform (VLFT10GEN) 4 29901 Encore Programmer 4 24950 MyCareLink Monitor 4 24952 MyCareLink Monitor 4 CareLink Network 4 2090 CareLink Programmer 3 CareLink 2090 Programmer 3 Smart Model 25000 Patient Reader 3 MMT- 508 - MiniMed pump 2 MMT – 511 pump Paradigm 2 MMT – 512 / MMT – 712 Paradigm x12 2 MMT – 515 / MMT – 715 Paradigm x15 2 MMT – 522 / MMT – 722 Paradigm REAL-TIME 2 MMT – 522(K) / MMT – 722(K) Paradigm REAL-TIME 2 MMT – 523 / MMT – 723 Paradigm Revel 2 MMT – 523(K) / MMT – 723(K) Paradigm 2 MMT – 554 / MMT – 754 MiniMed Veo 2 Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) 2 MMT – 551 / MMT – 751 MiniMed 530G 2 Valleylab Exchange Client 2 Valleylab FX8 Energy Platform (VLFX8GEN) 2 Conexus Radio Frequency Telemetry Protocol 2 MyCareLink Monitor 2 CareLink Monitor 2 Amplia CRT-D 2 Claria CRT-D 2 Compia CRT-D 2 Concerto CRT-D 2 Concerto II CRT-D 2 Consulta CRT-D 2 Evera ICD 2 Maximo II CRT-D 2 Maximo II ICD 2 Mirro ICD 2 Nayamed ND ICD 2 Primo ICD 2 Protecta ICD, Protecta CRT-D 2 Secura ICD 2
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.1
    CVE-2025-12995

    Medtronic CareLink Network allows an unauthenticated remote attacker to perform a brute force attack on an API endpoint…

    Medtronic CareLink Network
  • High 8.8
    CVE-2020-27252

    Medtronic MyCareLink Smart Time-of-check Time-of-use Race Condition

    Medtronic MyCareLink Smart 25000 is vulnerable to a race condition in the MCL Smart Patient Reader software update system, which allows unsigned firmware to be uploaded and executed on the Patient Reader. If exploited, an attacker could remotely execute code …

    Medtronic Smart Model 25000 Patient Reader
  • High 8.8
    CVE-2020-25187

    Medtronic MyCareLink Smart Heap-based Buffer Overflow

    Medtronic MyCareLink Smart 25000 is  vulnerable when an authenticated attacker runs a debug command, which can be sent to the patient reader and cause a heap overflow event within the MCL Smart Patient Reader software stack. The heap overflow could allow an a…

    Medtronic Smart Model 25000 Patient Reader
  • High 8.0
    CVE-2020-25183

    Medtronic MyCareLink Smart Improper Authentication

    Medtronic MyCareLink Smart 25000 contains an authentication protocol vulnerability where the method used to authenticate between the MCL Smart Patient Reader and the Medtronic MyCareLink Smart mobile app is vulnerable to bypass. This vulnerability enables an …

    Medtronic Smart Model 25000 Patient Reader
  • High 7.0
    CVE-2019-13539

    Medtronic Valleylab FT10 and FX8 Reversible One-way Hash

    Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use the descrypt algorithm for OS password ha…

    Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) Valleylab Exchange Client Valleylab FX8 Energy Platform (VLFX8GEN)
  • High 7.1
    CVE-2019-10964

    Medtronic MiniMed 508 and Paradigm Series Insulin Pumps Improper Access Control

    Medtronic MiniMed Insulin Pumps are designed to communicate using a wireless RF with other devices, such as blood glucose meters, glucose sensor transmitters, and CareLink USB devices. This wireless RF communication protocol does not properly implement authen…

    Medtronic MiniMed Paradigm 522K/722K pumps MiniMed Paradigm 523K/723K pumps MiniMed Paradigm 511 pump
  • High 7.1
    CVE-2018-10596

    Medtronic 2090 Carelink Programmer Improper Restriction of Communication Channel to Intended Endpoints

    Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates. It does not verify it is still connected to this virtual private network before downloading updates. The affected products initially establish an encaps…

    Medtronic 29901 Encore Programmer 2090 CareLink Programmer