CVE-2019-10964

🗓️ 28 Jun 2019 20:58:07Reported by icscertType

Vulnerability in Medtronic MinMed Insulin Pumps

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2019-10964 Medtronic MiniMed 508 and Paradigm Series Insulin Pumps Improper Access Control	28 Jun 201920:58	–	cvelist
EUVD	EUVD-2019-2678	7 Oct 202500:30	–	euvd
ICS	Medtronic MiniMed 508 and Paradigm Series Insulin Pumps	27 Jun 201900:00	–	ics
NVD	CVE-2019-10964	28 Jun 201921:15	–	nvd
Prion	Authentication flaw	28 Jun 201921:15	–	prion
ThreatPost	FDA Warns of Potentially Fatal Flaws in Medtronic Insulin Pumps	28 Jun 201915:14	–	threatpost

NVD

Vulners

Node

medtronic minimed_508_firmware

AND

medtronic minimed_508Match-

Node

medtronic minimed_paradigm_511_firmware

AND

medtronic minimed_paradigm_511Match-

Node

medtronic minimed_paradigm_512_firmware

AND

medtronic minimed_paradigm_512Match-

Node

medtronic minimed_paradigm_712_firmware

AND

medtronic minimed_paradigm_712Match-

Node

medtronic minimed_paradigm_712e_firmware

AND

medtronic minimed_paradigm_712eMatch-

Node

medtronic minimed_paradigm_515_firmware

AND

medtronic minimed_paradigm_515Match-

Node

medtronic minimed_paradigm_715_firmware

AND

medtronic minimed_paradigm_715Match-

Node

medtronic minimed_paradigm_522_firmware

AND

medtronic minimed_paradigm_522Match-

Node

medtronic minimed_paradigm_722_firmware

AND

medtronic minimed_paradigm_722Match-

Node

medtronic minimed_paradigm_522k_firmware

AND

medtronic minimed_paradigm_522kMatch-

Node

medtronic minimed_paradigm_722k_firmware

AND

medtronic minimed_paradigm_722kMatch-

Node

medtronic minimed_paradigm_523_firmwareRange≤2.4a

AND

medtronic minimed_paradigm_523Match-

Node

medtronic minimed_paradigm_723_firmwareRange≤2.4a

AND

medtronic minimed_paradigm_723Match-

Node

medtronic minimed_paradigm_523k_firmwareRange≤2.4a

AND

medtronic minimed_paradigm_523kMatch-

Node

medtronic minimed_paradigm_723k_firmwareRange≤2.4a

AND

medtronic minimed_paradigm_723kMatch-

Node

medtronic minimed_paradigm_veo_554_firmwareRange≤2.6a

AND

medtronic minimed_paradigm_veo_554Match-

Node

medtronic minimed_paradigm_veo_754_firmwareRange≤2.6a

AND

medtronic minimed_paradigm_veo_754Match-

Node

medtronic minimed_paradigm_veo_554cm_firmwareRange≤2.7a

AND

medtronic minimed_paradigm_veo_554cmRange≤2.7a

Node

medtronic minimed_paradigm_veo_754cm_firmwareMatch-

AND

medtronic minimed_paradigm_veo_754cmMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "MiniMed 508 pump",
    "vendor": "Medtronic",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MiniMed Paradigm 511 pump",
    "vendor": "Medtronic",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MiniMed Paradigm 512/712 pumps",
    "vendor": "Medtronic",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MiniMed Paradigm 712E pump",
    "vendor": "Medtronic",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MiniMed Paradigm 515/715 pumps",
    "vendor": "Medtronic",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MiniMed Paradigm 522/722 pumps",
    "vendor": "Medtronic",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MiniMed Paradigm 522K/722K pumps",
    "vendor": "Medtronic",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MiniMed Paradigm 523/723 pumps",
    "vendor": "Medtronic",
    "versions": [
      {
        "lessThanOrEqual": "Software Versions 2.4A",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MiniMed Paradigm 523K/723K pumps",
    "vendor": "Medtronic",
    "versions": [
      {
        "lessThanOrEqual": "Software Versions 2.4A",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MiniMed Paradigm Veo 554/754 pumps",
    "vendor": "Medtronic",
    "versions": [
      {
        "lessThanOrEqual": "Software Versions 2.6A",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MiniMed Paradigm Veo 554CM/754CM pumps",
    "vendor": "Medtronic",
    "versions": [
      {
        "lessThanOrEqual": "Software Versions 2.7A",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/108926
global	www.global.medtronic.com/xg-en/product-security/security-bulletins/minimed-508-paradigm.html
cisa	www.cisa.gov/news-events/ics-medical-advisories/icsma-19-178-01
us-cert	www.us-cert.gov/ics/advisories/icsma-19-178-01

22 May 2025 19:15Current

7.2High risk

Vulners AI Score7.2

CVSS 25.8

CVSS 38.8

CVSS 3.17.1

EPSS0.00382

security vulnerability medtronic minmed insulin pumps cve-2019-10964 wireless communication authentication authorization adjacent access data interception insulin delivery control