CVEvulnerability
CVE-2022-32537
4.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-12-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.8 MEDIUM — CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 3.1 ([email protected])
- 4.8 MEDIUM — CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-693
Description
A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device; advanced technical knowledge is required for exploitation. Please refer to the Medtronic Product Security Bulletin for guidance
Affected configurations
• medtronic guardian link 2 transmitter mmt-7730 firmware
• medtronic guardian link 2 transmitter mmt-7731 firmware
• medtronic guardian link 2 transmitter mmt-7738 firmware
• medtronic guardian link 2 transmitter mmt-7775 firmware
• medtronic guardian link 3 transmitter mmt-7810 firmware
• medtronic guardian link 3 transmitter mmt-7811 firmware
• medtronic minimed 620g mmt-1750 firmware
• medtronic minimed 630g mmt-1715 firmware
• medtronic minimed 630g mmt-1754 firmware
• medtronic minimed 630g mmt-1755 firmware
• medtronic minimed 640g mmt-1711 firmware
• medtronic minimed 640g mmt-1712 firmware
• medtronic minimed 640g mmt-1751 firmware
• medtronic minimed 640g mmt-1752 firmware
• medtronic minimed 670g mmt-1740 firmware
• medtronic minimed 670g mmt-1741 firmware
• medtronic minimed 670g mmt-1742 firmware
• medtronic minimed 670g mmt-1760 firmware
• medtronic minimed 670g mmt-1761 firmware
• medtronic minimed 670g mmt-1762 firmware
• medtronic minimed 670g mmt-1780 firmware
• medtronic minimed 670g mmt-1781 firmware
• medtronic minimed 670g mmt-1782 firmware
• medtronic mmt-1151 firmware
• medtronic mmt-1152 firmware
• medtronic mmt-1351 firmware
• medtronic mmt-1352 firmware
• medtronic mmt-7306 firmware
Related
Weakness · CWE (1)
- CWE-693 Protection Mechanism Failure weakness
References
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-22-263-01 www.cisa.gov
- https://www.medtronic.com/en-us/e/product-security/security-bulletins/minimed-600-series-communication-issue.html www.medtronic.com
- https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed-600-series-communication-issue.html Mitigation, Vendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsma-22-263-01 Third Party Advisory, US Government Resource