ZeroHour

CVE-2022-32537

CVSS 3.1
4.8 medium
EPSS
<1%p26
Published
()
Modified
Description

A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device; advanced technical knowledge is required for exploitation. Please refer to the Medtronic Product Security Bulletin for guidance

Vendors
medtronic
Products
guardian link 2 transmitter mmt-7730 firmware, guardian link 2 transmitter mmt-7731 firmware, guardian link 2 transmitter mmt-7738 firmware, guardian link 2 transmitter mmt-7775 firmware, guardian link 3 transmitter mmt-7810 firmware, guardian link 3 transmitter mmt-7811 firmware, minimed 620g mmt-1750 firmware, minimed 630g mmt-1715 firmware, minimed 630g mmt-1754 firmware, minimed 630g mmt-1755 firmware, minimed 640g mmt-1711 firmware, minimed 640g mmt-1712 firmware
Weakness
CWE-693
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

In the news

No ingested article mentions this CVE yet.