Description
Medtronic MiniMed MMT devices when paired with a remote controller and having the “easy bolus” and “remote bolus” options enabled (non-default), are vulnerable to a capture-replay attack. An attacker can capture the wireless transmissions between the remote controller and the pump and replay them to cause an insulin (bolus) delivery.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Medtronic MMT- 508 - MiniMed pump
Default version status: unaffected
All versionsaffected
Medtronic MMT – 511 pump Paradigm
Default version status: unaffected
All versionsaffected
Medtronic MMT – 512 / MMT – 712 Paradigm x12
Default version status: unaffected
All versionsaffected
Medtronic MMT – 515 / MMT – 715 Paradigm x15
Default version status: unaffected
All versionsaffected
Medtronic MMT – 522 / MMT – 722 Paradigm REAL-TIME
Default version status: unaffected
All versionsaffected
Medtronic MMT – 522(K) / MMT – 722(K) Paradigm REAL-TIME
Default version status: unaffected
All versionsaffected
Medtronic MMT – 523 / MMT – 723 Paradigm Revel
Default version status: unaffected
All versionsaffected
Medtronic MMT – 523(K) / MMT – 723(K) Paradigm
Default version status: unaffected
All versionsaffected
Medtronic MMT – 554 / MMT – 754 MiniMed Veo
Default version status: unaffected
All versionsaffected
Medtronic MMT – 551 / MMT – 751 MiniMed 530G
Default version status: unaffected
All versionsaffected