CVE-2018-10634

Published: Aug 13, 2018Modified: May 22, 2025

5.3

Vector

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.6 / Impact: 3.6

Source: NVD

Description

Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted in cleartext. A sufficiently skilled attacker could capture these transmissions and extract sensitive information, such as device serial numbers.

Affected (9)

Products: Medtronic: Minimed Paradigm Revel Mmt 523k Firmware, Minimed Paradigm Revel Mmt 723k Firmware, Minimed Paradigm Revel Mmt 723 Firmware, Minimed 530g Mmt 551 Firmware, Minimed Paradigm Real Time Mmt 522 Firmware, Minimed Paradigm Real Time Mmt 722 Firmware, Minimed 530g Mmt 751 Firmware, Minimed Paradigm Revel Mmt 523 Firmware, Minimed Paradigm 508 Insulin Pump Firmware

Medtronic

9 products

Minimed Paradigm Revel Mmt 523k Firmware

Minimed Paradigm Revel Mmt 723k Firmware

Minimed Paradigm Revel Mmt 723 Firmware

Minimed 530g Mmt 551 Firmware

Minimed Paradigm Real Time Mmt 522 Firmware

Minimed Paradigm Real Time Mmt 722 Firmware

Minimed 530g Mmt 751 Firmware

Minimed Paradigm Revel Mmt 523 Firmware

Minimed Paradigm 508 Insulin Pump Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Medtronic Minimed Paradigm Revel Mmt 523k Firmware	All versions

Running on/with	Platform Versions
Medtronic Minimed Paradigm Revel Mmt 523k	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Medtronic Minimed Paradigm Revel Mmt 723k Firmware	All versions

Running on/with	Platform Versions
Medtronic Minimed Paradigm Revel Mmt 723k	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Medtronic Minimed Paradigm Revel Mmt 723 Firmware	All versions

Running on/with	Platform Versions
Medtronic Minimed Paradigm Revel Mmt 723	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Medtronic Minimed 530g Mmt 551 Firmware	All versions

Running on/with	Platform Versions
Medtronic Minimed 530g Mmt 551	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Medtronic Minimed Paradigm Real Time Mmt 522 Firmware	All versions

Running on/with	Platform Versions
Medtronic Minimed Paradigm Real Time Mmt 522	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Medtronic Minimed Paradigm Real Time Mmt 722 Firmware	All versions

Running on/with	Platform Versions
Medtronic Minimed Paradigm Real Time Mmt 722	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Medtronic Minimed 530g Mmt 751 Firmware	All versions

Running on/with	Platform Versions
Medtronic Minimed 530g Mmt 751	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Medtronic Minimed Paradigm Revel Mmt 523 Firmware	All versions

Running on/with	Platform Versions
Medtronic Minimed Paradigm Revel Mmt 523	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Medtronic Minimed Paradigm 508 Insulin Pump Firmware	All versions

Running on/with	Platform Versions
Medtronic Minimed Paradigm 508 Insulin Pump	All versions

Related CWEs

CWE-319

Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (5)

http://www.securityfocus.com/bid/105044

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed.html

Source: ics-cert@hq.dhs.gov

https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-02

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/105044

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.