Vendor
Medtronic
35 known vulnerabilities in products by Medtronic, 0 of them actively exploited (CISA KEV).
Key figures
35
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-31222 | Medtronic Paceart MSMQ Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2020-25187 | Medtronic MyCareLink Smart Heap-based Buffer Overflow | 8.8 | |
| High | CVE-2020-27252 | Medtronic MyCareLink Smart Time-of-check Time-of-use Race Condition | 8.8 | |
| High | CVE-2019-13543 | Medtronic Valleylab FT10 and FX8 Use of Hard-coded Credentials | 5.8 | |
| High | CVE-2018-10596 | Medtronic 2090 CareLink Programmer: Improper Restriction of Communication Channel to Intended Endpoints | 7.1 | |
| Critical | CVE-2019-6538 | Medtronic Conexus Radio Frequency Telemetry Protocol Improper Access Control | 9.3 | |
| High | CVE-2019-10964 | Medtronic MiniMed 508 and Paradigm Series Insulin Pumps Improper Access Control | 7.1 | |
| High | CVE-2020-25183 | Medtronic MyCareLink Smart Improper Authentication | 8.0 | |
| Critical | CVE-2025-12995 | Medtronic CareLink Network: Improper Restriction of Excessive Authentication Attempts | 8.1 | |
| Medium | CVE-2025-4386 | Medtronic MyCareLink Patient Monitor Hardware Debug Port | 6.8 | |
| Medium | CVE-2025-4397 | Medtronic MyCareLink Patient Monitor Data Encryption Weakness | 6.8 | |
| Medium | CVE-2018-14781 | Medtronic MiniMed MMT-500/MMT-503 Remote Controllers Authentication Bypass by Capture-replay | 5.3 | |
| Medium | CVE-2025-4395 | Medtronic MyCareLink Patient Monitor Empty Password Vulnerability | 6.8 | |
| Medium | CVE-2018-5448 | Medtronic 2090 Carelink Programmer Relative Path Traversal | 4.8 | |
| Medium | CVE-2025-4394 | Medtronic MyCareLink Patient Monitor Unencrypted Filesystem Vulnerability | 6.8 | |
| Medium | CVE-2025-4393 | Medtronic MyCareLink Patient Monitor Deserialization Vulnerability | 6.5 | |
| Not rated | CVE-2011-3386 | Medtronic Paradigm Wireless Insulin Pump: Denial of Service | — | |
| Medium | CVE-2025-12994 | Medtronic CareLink Network: Observable Response Discrepancy | 5.3 | |
| Medium | CVE-2018-10631 | Medtronic N'Vision Clinician Programmer Protection Mechanism Failure | 6.3 | |
| Medium | CVE-2018-8870 | Medtronic MyCareLink Patient Monitor Use of Hard-coded Password | 6.4 | |
| High | CVE-2019-13539 | Medtronic Valleylab FT10 and FX8 Reversible One-way Hash | 7.0 | |
| Medium | CVE-2018-10634 | Medtronic MiniMed MMT-500/MMT-503 Remote Controllers Cleartext Transmission of Sensitive Information | 4.8 | |
| Medium | CVE-2023-25931 | Medtronic Micro Clinician & InterStim X Clinician App Password Reset Issue | 6.4 | |
| Medium | CVE-2018-8868 | Medtronic MyCareLink Patient Monitor Exposed Dangerous Method or Function | 6.2 | |
| Medium | CVE-2018-10622 | Medtronic MyCareLink Patient Monitor Network Credential Weakness | 5.2 |