The Internet of Medical Things (IoMT) offers significant benefits to healthcare, including improved patient monitoring and data collection. However, these devices also present substantial security risks that could compromise the healthcare industry and, more importantly, patient health data, which unauthorized individuals should not access. These risks include internal and external threats, which can lead to data being altered, stolen, or misused for malicious purposes. This paper conducts a vulnerability analysis of IoMT devices, identifying significant threats that impact the confidentiality and privacy of patients. The vulnerability assessment examines each layer of the IoMT architecture to understand the most potential and common security issues comprehensively.