CVE-2025-12996

published 2025-12-04

CVE-2025-12996: Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from errors logged under…

Priority P4 19 medium 4.1 CVSS 3.1

AV L AC H PR H UI N S U C H I N A N

Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from errors logged under certain circumstances. This issue affects CareLink Network: before December 4, 2025.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
medtronic	carelink_network	< December 4, 2025	December 4, 2025
medtronic	carelink_network	< 2025-12-04	2025-12-04

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-532