Description
Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An
attacker who obtains per-product credentials from the monitor and paired
implantable cardiac device information can potentially upload invalid
data to the Medtronic CareLink network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Medtronic | 24950 MyCareLink Monitor | All versions | — |
| Medtronic | 24952 MyCareLink Monitor | All versions | — |
Advisories 1
- ICSMA-18-219-01 Medtronic MyCareLink 24950 Patient Monitor (Update A) CISA ICS & IT advisories · May 7, 2026