CVE-2025-12997 - Medtronic CareLink Network Insecure Direct Object Reference Vulnerability

CVE-2025-12997 - Medtronic CareLink Network Insecure Direct Object Reference Vulnerability

CVE ID : CVE-2025-12997 Published : Dec. 4, 2025, 8:16 p.m. | 33 minutes ago Description : Insecure Direct Object Reference vulnerability in Medtronic CareLink Network which allows an authenticated attacker with access to specific device and user information to submit web requests to an API endpoint that would expose sensitive user information. This issue affects CareLink Network: before December 4, 2025. Severity: 2.2 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
LOW
Published
Dec. 4, 2025
Attack Vector: Network

Source: Telegram CVE Monitor