CVE-2018-10634

Medtronic MMT 508 MiniMed insulin pump, 522 / MMT - 722 Paradigm REAL-TIME, 523 / MMT - 723 Paradigm Revel, 523K / MMT - 723K Paradigm Revel, and 551 / MMT - 751 MiniMed 530G communications between the pump and wireless accessories are transmitted in cleartext. A sufficiently skilled attacker could capture these transmissions and extract sensitive information, such as device serial numbers.
References
Link Resource
http://www.securityfocus.com/bid/105044 Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-02 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:medtronic:minimed_paradigm_revel_mmt-523k_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:medtronic:minimed_paradigm_revel_mmt-523k:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:medtronic:minimed_paradigm_revel_mmt-723k_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:medtronic:minimed_paradigm_revel_mmt-723k:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:medtronic:minimed_paradigm_revel_mmt-723_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:medtronic:minimed_paradigm_revel_mmt-723:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:medtronic:minimed_530g_mmt-551_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:medtronic:minimed_530g_mmt-551:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:medtronic:minimed_paradigm_real-time_mmt-522_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:medtronic:minimed_paradigm_real-time_mmt-522:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:medtronic:minimed_paradigm_real-time_mmt-722_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:medtronic:minimed_paradigm_real-time_mmt-722:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:medtronic:minimed_530g_mmt-751_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:medtronic:minimed_530g_mmt-751:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:medtronic:minimed_paradigm_revel_mmt-523_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:medtronic:minimed_paradigm_revel_mmt-523:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:medtronic:minimed_paradigm_508_insulin_pump_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:medtronic:minimed_paradigm_508_insulin_pump:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-08-13 21:47

Updated : 2024-02-28 16:48


NVD link : CVE-2018-10634

Mitre link : CVE-2018-10634

CVE.ORG link : CVE-2018-10634


JSON object : View

Products Affected

medtronic

  • minimed_paradigm_revel_mmt-523k_firmware
  • minimed_paradigm_revel_mmt-723_firmware
  • minimed_paradigm_revel_mmt-723
  • minimed_530g_mmt-551
  • minimed_paradigm_revel_mmt-723k_firmware
  • minimed_paradigm_revel_mmt-723k
  • minimed_530g_mmt-751
  • minimed_paradigm_508_insulin_pump
  • minimed_paradigm_real-time_mmt-722_firmware
  • minimed_paradigm_508_insulin_pump_firmware
  • minimed_530g_mmt-551_firmware
  • minimed_paradigm_revel_mmt-523k
  • minimed_530g_mmt-751_firmware
  • minimed_paradigm_real-time_mmt-722
  • minimed_paradigm_real-time_mmt-522
  • minimed_paradigm_real-time_mmt-522_firmware
  • minimed_paradigm_revel_mmt-523
  • minimed_paradigm_revel_mmt-523_firmware
CWE
CWE-319

Cleartext Transmission of Sensitive Information