CVE-2018-10622mediumCWE-313

CVE-2018-10622: medium-severity vulnerability in Medtronic 24950 MyCareLink Monitor

Medtronic MyCareLink Patient Monitor Network Credential Weakness

Published 10 Aug 2018 · Updated 22 Jun 2026

Follow this CVE + Monitor 24950 MyCareLink Monitor + Monitor 24952 MyCareLink Monitor

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.2epss 0.4%

Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication.

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Affected products

Medtronic · 24950 MyCareLink Monitor Medtronic · 24952 MyCareLink Monitor

Related CVEs — Medtronic 24950 MyCareLink Monitor

In the same product, most dangerous first.

CVE-2018-8870MEDIUMMedtronic MyCareLink Patient Monitor Use of Hard-coded PasswordEPSS 0.4%CVE-2018-10626MEDIUMMedtronic MyCareLink 24950 Patient Monitor Insufficient Verification of Data AuthenticityEPSS 0.4%CVE-2018-8868MEDIUMMedtronic MyCareLink Patient Monitor Exposed Dangerous Method or FunctionEPSS 0.3%

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2018/icsma-18-219-01.json https://global.medtronic.com/xg-en/product-security/security-bulletins/mycarelink-8-7-18.html https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-01 https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-219-01 http://www.securityfocus.com/bid/105042