CVE-2020-25183

Name of the Vulnerable Software and Affected Versions Medtronic MyCareLink Smart 25000 all versions

Description The authentication protocol used between the MCL Smart Patient Reader and the MyCareLink Smart mobile app is vulnerable to bypass. This issue allows an attacker to use another mobile device or a malicious app on a smartphone to authenticate to the patient's Smart Reader, making the device believe it is communicating with the actual smartphone application when executed within Bluetooth range.

Recommendations For Medtronic MyCareLink Smart 25000 all versions: At the moment, there is no information about a newer version that contains a fix for this vulnerability.