Credential Storage Vulnerability in Medtronic MyCareLink Patient Monitor

CVE-2018-10622

What is CVE-2018-10622?

A serious security flaw exists in the Medtronic MyCareLink 24950 and 24952 Patient Monitors, where per-product credentials are stored in a recoverable format. This design oversight enables attackers to exploit these credentials, gaining unauthorized access for network authentication and decrypting local data at rest. Such vulnerabilities can compromise patient privacy and data integrity, highlighting the need for robust security measures in medical devices.

References