CVE-2019-6538

2019-03-2521:26:03

CWE-284

icscert

www.cve.org

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

JSON

The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement authentication or authorization. An attacker with adjacent short-range access to an affected product, in situations where the product’s radio is turned on, can inject, replay, modify, and/or intercept data within the telemetry communication. This communication protocol provides the ability to read and write memory values to affected implanted cardiac devices; therefore, an attacker could exploit this communication protocol to change memory in the implanted cardiac device.

CNA Affected

[
  {
    "product": "Medtronic Conexus Radio Frequency Telemetry Protocol",
    "vendor": "Medtronic",
    "versions": [
      {
        "status": "affected",
        "version": "MyCareLink Monitor versions 24950 and 24952"
      },
      {
        "status": "affected",
        "version": "CareLink Monitor version 2490C"
      },
      {
        "status": "affected",
        "version": "CareLink 2090 Programmer"
      },
      {
        "status": "affected",
        "version": "Amplia CRT-D"
      },
      {
        "status": "affected",
        "version": "Claria CRT-D"
      },
      {
        "status": "affected",
        "version": "Compia CRT-D"
      },
      {
        "status": "affected",
        "version": "Concerto CRT-D"
      },
      {
        "status": "affected",
        "version": "Concerto II CRT-D"
      },
      {
        "status": "affected",
        "version": "Consulta CRT-D"
      },
      {
        "status": "affected",
        "version": "Evera ICD"
      },
      {
        "status": "affected",
        "version": "Maximo II CRT-D and ICD"
      },
      {
        "status": "affected",
        "version": "Mirro ICD"
      },
      {
        "status": "affected",
        "version": "Nayamed ND ICD"
      },
      {
        "status": "affected",
        "version": "Primo ICD"
      },
      {
        "status": "affected",
        "version": "Protecta ICD and CRT-D"
      },
      {
        "status": "affected",
        "version": "Secura ICD"
      },
      {
        "status": "affected",
        "version": "Virtuoso ICD"
      },
      {
        "status": "affected",
        "version": "Virtuoso II ICD"
      },
      {
        "status": "affected",
        "version": "Visia AF ICD"
      },
      {
        "status": "affected",
        "version": "Viva CRT-D"
      }
    ]
  }
]