The Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. This vulnerability allows an attacker to obtain these credentials and modify encrypted drive data on the device. The flaw is identified as CVE-2025-4397 and has a CVSS 3.1 base score of 6.8, indicating a medium severity level.