CVE-2018-10634

Опубликовано: 13 авг. 2018

Источник: nvd

CVSS3: 5.3

CVSS3: 4.8

CVSS2: 2.9

EPSS Низкий

Описание

Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted in cleartext. A sufficiently skilled attacker could capture these transmissions and extract sensitive information, such as device serial numbers.

Ссылки

http://www.securityfocus.com/bid/105044
Third Party Advisory
VDB Entry
https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed.html
https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-02
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/105044
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-02
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:medtronic:minimed_paradigm_revel_mmt-523k_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronic:minimed_paradigm_revel_mmt-523k:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:medtronic:minimed_paradigm_revel_mmt-723k_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronic:minimed_paradigm_revel_mmt-723k:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:medtronic:minimed_paradigm_revel_mmt-723_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronic:minimed_paradigm_revel_mmt-723:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:medtronic:minimed_530g_mmt-551_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronic:minimed_530g_mmt-551:-:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:o:medtronic:minimed_paradigm_real-time_mmt-522_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronic:minimed_paradigm_real-time_mmt-522:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

cpe:2.3:o:medtronic:minimed_paradigm_real-time_mmt-722_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronic:minimed_paradigm_real-time_mmt-722:-:*:*:*:*:*:*:*

Конфигурация 7

Одновременно

cpe:2.3:o:medtronic:minimed_530g_mmt-751_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronic:minimed_530g_mmt-751:-:*:*:*:*:*:*:*

Конфигурация 8

Одновременно

cpe:2.3:o:medtronic:minimed_paradigm_revel_mmt-523_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronic:minimed_paradigm_revel_mmt-523:-:*:*:*:*:*:*:*

Конфигурация 9

Одновременно

cpe:2.3:o:medtronic:minimed_paradigm_508_insulin_pump_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronic:minimed_paradigm_508_insulin_pump:-:*:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.00128

Низкий

5.3 Medium

CVSS3

4.8 Medium

CVSS3

2.9 Low

CVSS2

Дефекты

CWE-319

Связанные уязвимости

GHSA-fxw8-j27m-3752

CVSS3: 5.3

github

больше 3 лет назад

Medtronic MMT 508 MiniMed insulin pump, 522 / MMT - 722 Paradigm REAL-TIME, 523 / MMT - 723 Paradigm Revel, 523K / MMT - 723K Paradigm Revel, and 551 / MMT - 751 MiniMed 530G communications between the pump and wireless accessories are transmitted in cleartext. A sufficiently skilled attacker could capture these transmissions and extract sensitive information, such as device serial numbers.

BDU:2018-00983

CVSS3: 6.5

fstec

больше 7 лет назад

Уязвимость медицинского оборудования Medtronic MiniMed, связанная с недостаточной защитой передаваемой информации, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 33%

0.00128

Низкий

5.3 Medium

CVSS3

4.8 Medium

CVSS3

2.9 Low

CVSS2

Дефекты

CWE-319