Medtronic MyCareLink Patient Monitor Hardware Debug Port

The Medtronic MyCareLink Patient Monitor has an exposed serial debug port that can be accessed physically, allowing an attacker to reach a login prompt without authentication. This could enable unauthorized access to sensitive patient monitoring data or device functions.

A UART serial interface on the Medtronic MyCareLink Patient Monitor exposes an unauthenticated login prompt to an attacker with physical access to the device. The vulnerability requires physical proximity but bypasses standard authentication mechanisms, potentially allowing administrative access or configuration changes to a critical medical device.