CVSS 3.1
5.3 mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:NCVE-2018-14781
Medtronic MiniMed MMT
devices when paired with a remote controller and having the “easy bolus” and “remote bolus” options enabled (non-default), are vulnerable to a capture-replay attack. An attacker can capture the wireless transmissions between the remote controller and the pump and replay them to cause an insulin (bolus) delivery.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-287, CWE-294
- Published
- Modified
- Record from
- the NVD, synced
Affected
- medtronicdiabetes:508_minimed_insulin_pump_firmware
- medtronicdiabetes:522_paradigm_real-time_firmware
- medtronicdiabetes:523_paradigm_revel_firmware
- medtronicdiabetes:523k_paradigm_revel_firmware
- medtronicdiabetes:551_minimed_530g_firmware
- medtronicdiabetes:722_paradigm_real-time_firmware
- medtronicdiabetes:723_paradigm_revel_firmware
- medtronicdiabetes:723k_paradigm_revel_firmware
- medtronicdiabetes:751_minimed_530g_firmware