medium4.8
CVE-2018-10634
Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted in cleartext.
Impact
Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted in cleartext. A sufficiently skilled attacker could capture these transmissions and extract sensitive information, such as device serial numbers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Medtronic | Minimed Paradigm Revel Mmt-523k Firmware | All versions |
| Medtronic | Minimed Paradigm Revel Mmt-723k Firmware | All versions |
| Medtronic | Minimed Paradigm Revel Mmt-723 Firmware | All versions |
| Medtronic | Minimed 530g Mmt-551 Firmware | All versions |
| Medtronic | Minimed Paradigm Real-Time Mmt-522 Firmware | All versions |
| Medtronic | Minimed Paradigm Real-Time Mmt-722 Firmware | All versions |
| Medtronic | Minimed 530g Mmt-751 Firmware | All versions |
| Medtronic | Minimed Paradigm Revel Mmt-523 Firmware | All versions |
| Medtronic | Minimed Paradigm 508 Insulin Pump Firmware | All versions |