1. Home
  2. CVE Database
  3. CVE-2025-12996
MEDIUM · 4.1

CVE-2025-12996

Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from errors logged under certain circumstances. This issue affects Car...

Vulnerability Description

Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from errors logged under certain circumstances. This issue affects CareLink Network: before December 4, 2025.

CVSS Score

4.1

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
MedtronicCarelink Network< 2025-12-04

Related Weaknesses (CWE)

CWE-532

References

FAQ

What is CVE-2025-12996?

CVE-2025-12996 is a vulnerability with a CVSS score of 4.1 (MEDIUM). Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from errors logged under certain circumstances. This issue affects Car...

How severe is CVE-2025-12996?

CVE-2025-12996 has been rated MEDIUM with a CVSS base score of 4.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-12996?

Check the references section above for vendor advisories and patch information. Affected products include: Medtronic Carelink Network.