CVE-2025-12995

CRITICO 9.8CVE-2025-12995 · Published 04/12/2025 · updated 25/09/2026

In breve

CVE-2025-12995 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda carelink network (medtronic).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.33%, superiore al 26.7% delle vulnerabilità.
Correzione: aggiornare a 2025-12-04 o successiva.

Package	Affected versions	Patched versions
carelink network medtronic	`< 2025-12-04`	`2025-12-04`

Description

Medtronic CareLink Network allows an unauthenticated remote attacker to perform a brute force attack on an API endpoint that could be used to determine a valid password under certain circumstances. This issue affects CareLink Network: before December 4, 2025.

References

medtronic.com/en-us/e/product-security/security-bulletins/carelink-network-vulnerabilities.html · Vendor Advisory

Altre vulnerabilità di carelink network

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free