CVE-2018-14781

Опубликовано: 13 авг. 2018

Источник: nvd

CVSS3: 5.3

CVSS2: 2.9

EPSS Низкий

Описание

Medtronic MiniMed MMT

devices when paired with a remote controller and having the “easy bolus” and “remote bolus” options enabled (non-default), are vulnerable to a capture-replay attack. An attacker can capture the wireless transmissions between the remote controller and the pump and replay them to cause an insulin (bolus) delivery.

Ссылки

http://www.securityfocus.com/bid/105044
Third Party Advisory
VDB Entry
https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed.html
https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-02
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/105044
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-02
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:medtronicdiabetes:508_minimed_insulin_pump_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronicdiabetes:508_minimed_insulin_pump:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:medtronicdiabetes:522_paradigm_real-time_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronicdiabetes:522_paradigm_real-time:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:medtronicdiabetes:722_paradigm_real-time_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronicdiabetes:722_paradigm_real-time:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:medtronicdiabetes:523_paradigm_revel_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronicdiabetes:523_paradigm_revel:-:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:o:medtronicdiabetes:723_paradigm_revel_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronicdiabetes:723_paradigm_revel:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

cpe:2.3:o:medtronicdiabetes:523k_paradigm_revel_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronicdiabetes:523k_paradigm_revel:-:*:*:*:*:*:*:*

Конфигурация 7

Одновременно

cpe:2.3:o:medtronicdiabetes:723k_paradigm_revel_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronicdiabetes:723k_paradigm_revel:-:*:*:*:*:*:*:*

Конфигурация 8

Одновременно

cpe:2.3:o:medtronicdiabetes:551_minimed_530g_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronicdiabetes:551_minimed_530g:-:*:*:*:*:*:*:*

Конфигурация 9

Одновременно

cpe:2.3:o:medtronicdiabetes:751_minimed_530g_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:medtronicdiabetes:751_minimed_530g:-:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.00321

Низкий

5.3 Medium

CVSS3

5.3 Medium

CVSS3

2.9 Low

CVSS2

Дефекты

CWE-294

CWE-287

Связанные уязвимости

GHSA-cv4q-4xgp-cr7m

CVSS3: 5.3

github

больше 3 лет назад

Medtronic MMT 508 MiniMed insulin pump, 522 / MMT - 722 Paradigm REAL-TIME, 523 / MMT - 723 Paradigm Revel, 523K / MMT - 723K Paradigm Revel, and 551 / MMT - 751 MiniMed 530G The models identified above, when paired with a remote controller and having the "easy bolus" and "remote bolus" options enabled (non-default), are vulnerable to a capture-replay attack. An attacker can capture the wireless transmissions between the remote controller and the pump and replay them to cause an insulin (bolus) delivery.

BDU:2018-00982

CVSS3: 6.5

fstec

больше 7 лет назад

Уязвимость медицинского оборудования Medtronic MiniMed, вызванная недостатками механизма аутентификации, позволяющая нарушителю повторно воспроизвести перехваченный запрос

EPSS

Процентиль: 55%

0.00321

Низкий

5.3 Medium

CVSS3

5.3 Medium

CVSS3

2.9 Low

CVSS2

Дефекты

CWE-294

CWE-287