Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-6540 EUVD-2019-16099GHSA-r6ff-m2x2-m36p

Medtronic Conexus Radio Frequency Telemetry Protocol Cleartext Transmission of Sensitive Information

Published Mar 26, 2019 · Updated May 22, 2025 · Assigned by icscert

Vendor: Medtronic Product: Amplia CRT-D Product: Brava CRT-D Product: CareLink 2090 Programmer Product: CareLink Monitor Product: Claria CRT-D Product: Compia CRT-D Product: Concerto CRT-D Product: Concerto II CRT-D Product: Conexus Radio Frequency Telemetry Protocol Product: Consulta CRT-D Product: Evera ICD Product: Maximo II CRT-D Product: Maximo II ICD Product: Mirro ICD Product: Mirro MRI ICD Product: MyCareLink Monitor Product: Nayamed ND ICD Product: Primo ICD Product: Protecta ICD, Protecta CRT-D Product: Secura ICD Product: Virtuoso ICD Product: Virtuoso II ICD Product: Visia AF ICD Product: Viva CRT-D

Description

The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement encryption. An attacker with adjacent short-range access to a target product can listen to communications, including the transmission of sensitive data.

Affected products

VendorProductAffectedFixed
Medtronic Conexus Radio Frequency Telemetry Protocol All versions —
Medtronic MyCareLink Monitor 24950, 24952 —
Medtronic CareLink Monitor 2490C —
Medtronic CareLink 2090 Programmer All versions —
Medtronic Amplia CRT-D All versions —
Medtronic Claria CRT-D All versions —
Medtronic Compia CRT-D All versions —
Medtronic Concerto CRT-D All versions —
Medtronic Concerto II CRT-D All versions —
Medtronic Consulta CRT-D All versions —
Medtronic Evera ICD All versions —
Medtronic Maximo II CRT-D All versions —
Medtronic Maximo II ICD All versions —
Medtronic Mirro ICD All versions —
Medtronic Nayamed ND ICD All versions —
Medtronic Primo ICD All versions —
Medtronic Protecta ICD, Protecta CRT-D All versions —
Medtronic Secura ICD All versions —
Medtronic Virtuoso ICD All versions —
Medtronic Virtuoso II ICD All versions —
Medtronic Visia AF ICD All versions —
Medtronic Viva CRT-D All versions —
Medtronic Brava CRT-D All versions —
Medtronic Mirro MRI ICD All versions —

Advisories 1

References