Към съдържанието
Търсене

CVE-2019-6538: Medtronic Conexus Radio Frequency Telemetry Protocol

9.3

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се от съседна мрежа, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

    Описание

    Оригинално описание

    The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement authentication or authorization. An attacker with adjacent short-range access to an affected product, in situations where the product’s radio is turned on, can inject, replay, modify, and/or intercept data within the telemetry communication. This communication protocol provides the ability to read and write memory values to affected implanted cardiac devices; therefore, an attacker could exploit this communication protocol to change memory in the implanted cardiac device.

    Засегнати продукти

    • Medtronic Conexus Radio Frequency Telemetry Protocol: All versions
    • Medtronic MyCareLink Monitor: 24950; 24952
    • Medtronic CareLink Monitor: 2490C
    • Medtronic CareLink 2090 Programmer: All versions
    • Medtronic Amplia CRT-D: All versions
    • Medtronic Claria CRT-D: All versions
    • Medtronic Compia CRT-D: All versions
    • Medtronic Concerto CRT-D: All versions
    • Medtronic Concerto II CRT-D: All versions
    • Medtronic Consulta CRT-D: All versions
    • Medtronic Evera ICD: All versions
    • Medtronic Maximo II CRT-D: All versions
    • Medtronic Maximo II ICD: All versions
    • Medtronic Mirro ICD: All versions
    • Medtronic Nayamed ND ICD: All versions
    • Medtronic Primo ICD: All versions
    • Medtronic Protecta ICD, Protecta CRT-D: All versions
    • Medtronic Secura ICD: All versions
    • Medtronic Virtuoso ICD: All versions
    • Medtronic Virtuoso II ICD: All versions
    • Medtronic Visia AF ICD: All versions
    • Medtronic Viva CRT-D: All versions
    • Medtronic Brava CRT-D: All versions
    • Medtronic Mirro MRI ICD: All versions

    Вид слабост

    История

    • 25 март 2019 Публикувано

    Статии във FO.bg

    Други уязвимости в Medtronic Conexus Radio Frequency Telemetry Protocol

    Първоизточници