The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement authentication or authorization. An attacker with adjacent short-range access to an affected product, in situations where the productβs radio is turned on, can inject, replay, modify, and/or intercept data within the telemetry communication. This communication protocol provides the ability to read and write memory values to affected implanted cardiac devices; therefore, an attacker could exploit this communication protocol to change memory in the implanted cardiac device.
[
{
"product": "Medtronic Conexus Radio Frequency Telemetry Protocol",
"vendor": "Medtronic",
"versions": [
{
"status": "affected",
"version": "MyCareLink Monitor versions 24950 and 24952"
},
{
"status": "affected",
"version": "CareLink Monitor version 2490C"
},
{
"status": "affected",
"version": "CareLink 2090 Programmer"
},
{
"status": "affected",
"version": "Amplia CRT-D"
},
{
"status": "affected",
"version": "Claria CRT-D"
},
{
"status": "affected",
"version": "Compia CRT-D"
},
{
"status": "affected",
"version": "Concerto CRT-D"
},
{
"status": "affected",
"version": "Concerto II CRT-D"
},
{
"status": "affected",
"version": "Consulta CRT-D"
},
{
"status": "affected",
"version": "Evera ICD"
},
{
"status": "affected",
"version": "Maximo II CRT-D and ICD"
},
{
"status": "affected",
"version": "Mirro ICD"
},
{
"status": "affected",
"version": "Nayamed ND ICD"
},
{
"status": "affected",
"version": "Primo ICD"
},
{
"status": "affected",
"version": "Protecta ICD and CRT-D"
},
{
"status": "affected",
"version": "Secura ICD"
},
{
"status": "affected",
"version": "Virtuoso ICD"
},
{
"status": "affected",
"version": "Virtuoso II ICD"
},
{
"status": "affected",
"version": "Visia AF ICD"
},
{
"status": "affected",
"version": "Viva CRT-D"
}
]
}
]