CVE-2022-32537
4.8
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Exploitability: 1.2 / Impact: 3.6
Source: NVD
Description
A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device; advanced technical knowledge is required for exploitation. Please refer to the Medtronic Product Security Bulletin for guidance
Affected (28)
Products: Medtronic: Guardian Link 2 Transmitter Mmt 7730 Firmware, Guardian Link 2 Transmitter Mmt 7731 Firmware, Guardian Link 2 Transmitter Mmt 7738 Firmware, Guardian Link 2 Transmitter Mmt 7775 Firmware, Guardian Link 3 Transmitter Mmt 7810 Firmware, Guardian Link 3 Transmitter Mmt 7811 Firmware, Minimed 620g Mmt 1750 Firmware, Minimed 630g Mmt 1715 Firmware, Minimed 630g Mmt 1754 Firmware, Minimed 630g Mmt 1755 Firmware, Minimed 640g Mmt 1711 Firmware, Minimed 640g Mmt 1712 Firmware, Minimed 640g Mmt 1751 Firmware, Minimed 640g Mmt 1752 Firmware, Minimed 670g Mmt 1740 Firmware, Minimed 670g Mmt 1741 Firmware, Minimed 670g Mmt 1742 Firmware, Minimed 670g Mmt 1760 Firmware, Minimed 670g Mmt 1761 Firmware, Minimed 670g Mmt 1762 Firmware, Minimed 670g Mmt 1780 Firmware, Minimed 670g Mmt 1781 Firmware, Minimed 670g Mmt 1782 Firmware, Mmt 1151 Firmware, Mmt 1152 Firmware, Mmt 1351 Firmware, Mmt 1352 Firmware, Mmt 7306 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Guardian Link 2 Transmitter Mmt 7730 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Guardian Link 2 Transmitter Mmt 7731 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Guardian Link 2 Transmitter Mmt 7738 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Guardian Link 2 Transmitter Mmt 7775 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Guardian Link 3 Transmitter Mmt 7810 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Guardian Link 3 Transmitter Mmt 7811 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 620g Mmt 1750 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 630g Mmt 1715 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 630g Mmt 1754 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 630g Mmt 1755 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 640g Mmt 1711 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 640g Mmt 1712 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 640g Mmt 1751 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 640g Mmt 1752 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 670g Mmt 1740 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 670g Mmt 1741 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 670g Mmt 1742 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 670g Mmt 1760 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 670g Mmt 1761 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 670g Mmt 1762 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 670g Mmt 1780 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 670g Mmt 1781 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Minimed 670g Mmt 1782 | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Mmt 1151 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Mmt 1152 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Mmt 1351 | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Mmt 1352 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Medtronic Mmt 7306 | All versions |
References (4)
Source: security@medtronic.com
Source: security@medtronic.com
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Timeline
No history available yet.