Summary
Successful exploitation of this vulnerability may allow an attacker with adjacent access to one of the affected products to intercept, modify, or interfere with the wireless RF (radio frequency) communications to or from the product. This may allow attackers to read sensitive data, change pump settings, or control insulin delivery.
Vulnerabilities 1
-
High 7.1
Medtronic MiniMed 508 and Paradigm Series Insulin Pumps Improper Access Control
Medtronic MiniMed Insulin Pumps are designed to communicate using a wireless RF with other devices, such as blood glucose meters, glucose sensor transmitters, and CareLink USB devices. This wireless RF communication protocol does not properly implement authen…
Revision history
-
#1
ICSMA-19-178-01 Medtronic MiniMed 508 and Paradigm Series Insulin Pumps
References
-
ICS Advisory ICSMA-19-178-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-178-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-178-01
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://ics-cert.us-cert.gov/tips/ICS-TIP-12-146-01B