CVE-2022-32537 Medtronic MiniMed 600 Series Pump System Communication Issue

A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device; advanced...

CVE-2022-32537

The CVE-2022-32537 vulnerability affects Medtronic NGP 600 Series insulin pumps (MiniMed 620G/630G/640G/670G and linked components). Root cause: a protection mechanism failure (CWE-693) that could enable an unauthorized user nearby to learn aspects of the communication protocol during pairing bet...