Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2018-10634

Medtronic MiniMed MMT-500/MMT-503 Remote Controllers Cleartext Transmission of Sensitive Information

Description

Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted in cleartext. A sufficiently skilled attacker could capture these transmissions and extract sensitive information, such as device serial numbers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Medtronic MMT- 508 - MiniMed pump

Default version status: unaffected

  • All versionsaffected

Medtronic MMT – 511 pump Paradigm

Default version status: unaffected

  • All versionsaffected

Medtronic MMT – 512 / MMT – 712 Paradigm x12

Default version status: unaffected

  • All versionsaffected

Medtronic MMT – 515 / MMT – 715 Paradigm x15

Default version status: unaffected

  • All versionsaffected

Medtronic MMT – 522 / MMT – 722 Paradigm REAL-TIME

Default version status: unaffected

  • All versionsaffected

Medtronic MMT – 522(K) / MMT – 722(K) Paradigm REAL-TIME

Default version status: unaffected

  • All versionsaffected

Medtronic MMT – 523 / MMT – 723 Paradigm Revel

Default version status: unaffected

  • All versionsaffected

Medtronic MMT – 523(K) / MMT – 723(K) Paradigm

Default version status: unaffected

  • All versionsaffected

Medtronic MMT – 554 / MMT – 754 MiniMed Veo

Default version status: unaffected

  • All versionsaffected

Medtronic MMT – 551 / MMT – 751 MiniMed 530G

Default version status: unaffected

  • All versionsaffected

References