CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се от съседна мрежа, без особени условия, без вход и без действие от потребителя.
Описание
Оригинално описание
The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement encryption. An attacker with adjacent short-range access to a target product can listen to communications, including the transmission of sensitive data.
Засегнати продукти
- Medtronic Conexus Radio Frequency Telemetry Protocol: All versions
- Medtronic MyCareLink Monitor: 24950; 24952
- Medtronic CareLink Monitor: 2490C
- Medtronic CareLink 2090 Programmer: All versions
- Medtronic Amplia CRT-D: All versions
- Medtronic Claria CRT-D: All versions
- Medtronic Compia CRT-D: All versions
- Medtronic Concerto CRT-D: All versions
- Medtronic Concerto II CRT-D: All versions
- Medtronic Consulta CRT-D: All versions
- Medtronic Evera ICD: All versions
- Medtronic Maximo II CRT-D: All versions
- Medtronic Maximo II ICD: All versions
- Medtronic Mirro ICD: All versions
- Medtronic Nayamed ND ICD: All versions
- Medtronic Primo ICD: All versions
- Medtronic Protecta ICD, Protecta CRT-D: All versions
- Medtronic Secura ICD: All versions
- Medtronic Virtuoso ICD: All versions
- Medtronic Virtuoso II ICD: All versions
- Medtronic Visia AF ICD: All versions
- Medtronic Viva CRT-D: All versions
- Medtronic Brava CRT-D: All versions
- Medtronic Mirro MRI ICD: All versions
Вид слабост
История
- 26 март 2019 Публикувано