Skip to content
OpenAdvisories
Critical ICSMA-19-080-01 2 CVEs

Medtronic Conexus Radio Frequency Telemetry Protocol (Update C)

Published Mar 21, 2019 · Updated Apr 8, 2021 · Revision 4

Vendor: Medtronic Product: Amplia CRT-D Product: Brava CRT-D Product: CareLink 2090 Programmer Product: CareLink Monitor Product: Claria CRT-D Product: Compia CRT-D Product: Concerto CRT-D Product: Concerto II CRT-D Product: Consulta CRT-D Product: Evera ICD Product: Maximo II CRT-D and ICD Product: Mirro ICD Product: Mirro MRI ICD Product: MyCareLink Monitor Product: Nayamed ND ICD Product: Primo ICD Product: Protecta ICD and CRT-D Product: Secura ICD Product: Virtuoso ICD Product: Virtuoso II ICD Product: Visia AF ICD Product: Viva CRT-D

Summary

Successful exploitation of these vulnerabilities may allow an attacker with adjacent short-range access to one of the affected products to interfere with, generate, modify, or intercept the radio frequency (RF) communication of the Medtronic proprietary Conexus telemetry system, potentially impacting product functionality and/or allowing access to transmitted sensitive data. Successful exploitation requires: (1) an RF device capable of transmitting or receiving Conexus telemetry communication, such as a monitor, programmer, or software-defined radio (SDR); (2) to have adjacent short-range access to the affected products; and (3) for the products to be in states where the RF functionality is active. Before the device implant procedure and during follow-up clinic visits, the Conexus telemetry sessions require initiation by an inductive protocol. Outside of these use environments, the RF radio in the affected implanted device is enabled for brief periods of time to support scheduled follow-up transmissions and other operational and safety notifications. The result of successful exploitation of these vulnerabilities may include the ability to read and write any valid memory location on the affected implanted device and therefore impact the intended function of the device.

Vulnerabilities 2

  • Critical 9.3
    CVE-2019-6538

    Medtronic Conexus Radio Frequency Telemetry Protocol Improper Access Control

    The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera …

    Medtronic CareLink 2090 Programmer Amplia CRT-D Visia AF ICD
  • Medium 6.5
    CVE-2019-6540

    Medtronic Conexus Radio Frequency Telemetry Protocol Cleartext Transmission of Sensitive Information

    The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera …

    Medtronic CareLink 2090 Programmer Mirro ICD Compia CRT-D

Revision history

  1. #4

    ICSMA-19-080-01 Medtronic Conexus Radio Frequency Telemetry Protocol (Update C)

  2. #3

    ICSMA-19-080-01 Medtronic Conexus Radio Frequency Telemetry Protocol (Update B)

  3. #2

    ICSMA-19-080-01 Medtronic Conexus Radio Frequency Telemetry Protocol (Update A)

  4. #1

    ICSMA-19-080-01 Medtronic Conexus Radio Frequency Telemetry Protocol

References