CVE-2025-4395 | Medtronic MyCareLink Patient Monitor 24952 empty password in configuration file

A vulnerability was found in Medtronic MyCareLink Patient Monitor 24950 and MyCareLink Patient Monitor 24952. It has been classified as critical. Affected is an unknown function. The manipulation leads to empty password in configuration file.

This vulnerability is traded as CVE-2025-4395. It is possible to launch the attack on the physical device. There is no exploit available.

It is recommended to upgrade the affected component.