MedtronicCVELIST:CVE-2022-32537CVE-2022-32537 Medtronic MiniMed 600 Series Pump System Communication Issue
4.8 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
5.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
10.4%
A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device; advanced technical knowledge is required for exploitation. Please refer to the Medtronic Product Security Bulletin for guidance
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Minimed 600 Series Insulin Pump",
"vendor": "Medtronic",
"versions": [
{
"status": "affected",
"version": "620G, 630G, 640G, 670G"
}
]
}
]Related
4.8 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
5.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
10.4%