CVE-2022-32537CWE-693

Medtronic MiniMed 600 Series Pump System Communication Issue

Medium · published November 17, 2022

CVSS v3.1
4.8
EPSS
0%
Percentile
24.3
In the wild
Unconfirmed
What it is

A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device; advanced technical knowledge is required for exploitation. Please refer to the Medtronic Product Security Bulletin for guidance

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00325 · 24.3th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2022-11-17T20:47Z
EPSS history
Timeline
  • 17 NOV 20:47Z
    Medtronic MiniMed 600 Series Pump System Communication Issue
    cvelistv5