medium5.3
CVE-2018-14781
Medtronic MiniMed MMT devices when paired with a remote controller and having the “easy bolus” and “remote bolus” options enabled (non-default), are vulnerable…
Impact
Medtronic MiniMed MMT devices when paired with a remote controller and having the “easy bolus” and “remote bolus” options enabled (non-default), are vulnerable to a capture-replay attack. An attacker can capture the wireless transmissions between the remote controller and the pump and replay them to cause an insulin (bolus) delivery.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Medtronicdiabetes | 508 Minimed Insulin Pump Firmware | All versions |
| Medtronicdiabetes | 522 Paradigm Real-Time Firmware | All versions |
| Medtronicdiabetes | 722 Paradigm Real-Time Firmware | All versions |
| Medtronicdiabetes | 523 Paradigm Revel Firmware | All versions |
| Medtronicdiabetes | 723 Paradigm Revel Firmware | All versions |
| Medtronicdiabetes | 523k Paradigm Revel Firmware | All versions |
| Medtronicdiabetes | 723k Paradigm Revel Firmware | All versions |
| Medtronicdiabetes | 551 Minimed 530g Firmware | All versions |
| Medtronicdiabetes | 751 Minimed 530g Firmware | All versions |