ByteOS Network

Vulnerability Details :

CVE-2022-32537

Assigner Org ID-3c337f33-b2bd-4529-9792-f48cdb2838b4

Published At-17 Nov, 2022 | 20:47

Updated At-29 Apr, 2025 | 14:44

Medtronic MiniMed 600 Series Pump System Communication Issue

A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device; advanced technical knowledge is required for exploitation. Please refer to the Medtronic Product Security Bulletin for guidance

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:Medtronic

Assigner Org ID:3c337f33-b2bd-4529-9792-f48cdb2838b4

Published At:17 Nov, 2022 | 20:47

Updated At:29 Apr, 2025 | 14:44

▼CVE Numbering Authority (CNA)

Medtronic MiniMed 600 Series Pump System Communication Issue

Affected Products

Vendor

Medtronic

Product

Minimed 600 Series Insulin Pump

Default Status

unaffected

Versions

Affected

620G, 630G, 640G, 670G

Problem Types

Type	CWE ID	Description
CWE	CWE-693	CWE-693

Type: CWE

CWE ID: CWE-693

Description: CWE-693

Metrics

Version	Base score	Base severity	Vector
3.1	4.8	MEDIUM	CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Version: 3.1

Base score: 4.8

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

References

Hyperlink	Resource
https://www.cisa.gov/uscert/ics/advisories/icsma-22-263-01	N/A
https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed-600-series-communication-issue.html	N/A

Hyperlink: https://www.cisa.gov/uscert/ics/advisories/icsma-22-263-01

Resource: N/A

Hyperlink: https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed-600-series-communication-issue.html

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://www.cisa.gov/uscert/ics/advisories/icsma-22-263-01	x_transferred
https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed-600-series-communication-issue.html	x_transferred

Hyperlink: https://www.cisa.gov/uscert/ics/advisories/icsma-22-263-01

Resource:

x_transferred

Hyperlink: https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed-600-series-communication-issue.html

Resource:

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:security@medtronic.com

Published At:12 Dec, 2022 | 13:15

Updated At:07 Nov, 2023 | 03:47

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	4.8	MEDIUM	CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Secondary	3.1	4.8	MEDIUM	CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Type: Primary

Version: 3.1

Base score: 4.8

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Type: Secondary

Version: 3.1

Base score: 4.8

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

CPE Matches

medtronic>>guardian_link_2_transmitter_mmt-7730_firmware>>-

cpe:2.3:o:medtronic:guardian_link_2_transmitter_mmt-7730_firmware:-:*:*:*:*:*:*:*

medtronic>>guardian_link_2_transmitter_mmt-7730>>-

cpe:2.3:h:medtronic:guardian_link_2_transmitter_mmt-7730:-:*:*:*:*:*:*:*

medtronic>>guardian_link_2_transmitter_mmt-7731_firmware>>-

cpe:2.3:o:medtronic:guardian_link_2_transmitter_mmt-7731_firmware:-:*:*:*:*:*:*:*

medtronic>>guardian_link_2_transmitter_mmt-7731>>-

cpe:2.3:h:medtronic:guardian_link_2_transmitter_mmt-7731:-:*:*:*:*:*:*:*

medtronic>>guardian_link_2_transmitter_mmt-7738_firmware>>-

cpe:2.3:o:medtronic:guardian_link_2_transmitter_mmt-7738_firmware:-:*:*:*:*:*:*:*

medtronic>>guardian_link_2_transmitter_mmt-7738>>-

cpe:2.3:h:medtronic:guardian_link_2_transmitter_mmt-7738:-:*:*:*:*:*:*:*

medtronic>>guardian_link_2_transmitter_mmt-7775_firmware>>-

cpe:2.3:o:medtronic:guardian_link_2_transmitter_mmt-7775_firmware:-:*:*:*:*:*:*:*

medtronic>>guardian_link_2_transmitter_mmt-7775>>-

cpe:2.3:h:medtronic:guardian_link_2_transmitter_mmt-7775:-:*:*:*:*:*:*:*

medtronic>>guardian_link_3_transmitter_mmt-7810_firmware>>-

cpe:2.3:o:medtronic:guardian_link_3_transmitter_mmt-7810_firmware:-:*:*:*:*:*:*:*

medtronic>>guardian_link_3_transmitter_mmt-7810>>-

cpe:2.3:h:medtronic:guardian_link_3_transmitter_mmt-7810:-:*:*:*:*:*:*:*

medtronic>>guardian_link_3_transmitter_mmt-7811_firmware>>-

cpe:2.3:o:medtronic:guardian_link_3_transmitter_mmt-7811_firmware:-:*:*:*:*:*:*:*

medtronic>>guardian_link_3_transmitter_mmt-7811>>-

cpe:2.3:h:medtronic:guardian_link_3_transmitter_mmt-7811:-:*:*:*:*:*:*:*

medtronic>>minimed_620g_mmt-1750_firmware>>-

cpe:2.3:o:medtronic:minimed_620g_mmt-1750_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_620g_mmt-1750>>-

cpe:2.3:h:medtronic:minimed_620g_mmt-1750:-:*:*:*:*:*:*:*

medtronic>>minimed_630g_mmt-1715_firmware>>-

cpe:2.3:o:medtronic:minimed_630g_mmt-1715_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_630g_mmt-1715>>-

cpe:2.3:h:medtronic:minimed_630g_mmt-1715:-:*:*:*:*:*:*:*

medtronic>>minimed_630g_mmt-1754_firmware>>-

cpe:2.3:o:medtronic:minimed_630g_mmt-1754_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_630g_mmt-1754>>-

cpe:2.3:h:medtronic:minimed_630g_mmt-1754:-:*:*:*:*:*:*:*

medtronic>>minimed_630g_mmt-1755_firmware>>-

cpe:2.3:o:medtronic:minimed_630g_mmt-1755_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_630g_mmt-1755>>-

cpe:2.3:h:medtronic:minimed_630g_mmt-1755:-:*:*:*:*:*:*:*

medtronic>>minimed_640g_mmt-1711_firmware>>-

cpe:2.3:o:medtronic:minimed_640g_mmt-1711_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_640g_mmt-1711>>-

cpe:2.3:h:medtronic:minimed_640g_mmt-1711:-:*:*:*:*:*:*:*

medtronic>>minimed_640g_mmt-1712_firmware>>-

cpe:2.3:o:medtronic:minimed_640g_mmt-1712_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_640g_mmt-1712>>-

cpe:2.3:h:medtronic:minimed_640g_mmt-1712:-:*:*:*:*:*:*:*

medtronic>>minimed_640g_mmt-1751_firmware>>-

cpe:2.3:o:medtronic:minimed_640g_mmt-1751_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_640g_mmt-1751>>-

cpe:2.3:h:medtronic:minimed_640g_mmt-1751:-:*:*:*:*:*:*:*

medtronic>>minimed_640g_mmt-1752_firmware>>-

cpe:2.3:o:medtronic:minimed_640g_mmt-1752_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_640g_mmt-1752>>-

cpe:2.3:h:medtronic:minimed_640g_mmt-1752:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1740_firmware>>-

cpe:2.3:o:medtronic:minimed_670g_mmt-1740_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1740>>-

cpe:2.3:h:medtronic:minimed_670g_mmt-1740:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1741_firmware>>-

cpe:2.3:o:medtronic:minimed_670g_mmt-1741_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1741>>-

cpe:2.3:h:medtronic:minimed_670g_mmt-1741:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1742_firmware>>-

cpe:2.3:o:medtronic:minimed_670g_mmt-1742_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1742>>-

cpe:2.3:h:medtronic:minimed_670g_mmt-1742:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1760_firmware>>-

cpe:2.3:o:medtronic:minimed_670g_mmt-1760_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1760>>-

cpe:2.3:h:medtronic:minimed_670g_mmt-1760:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1761_firmware>>-

cpe:2.3:o:medtronic:minimed_670g_mmt-1761_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1761>>-

cpe:2.3:h:medtronic:minimed_670g_mmt-1761:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1762_firmware>>-

cpe:2.3:o:medtronic:minimed_670g_mmt-1762_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1762>>-

cpe:2.3:h:medtronic:minimed_670g_mmt-1762:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1780_firmware>>-

cpe:2.3:o:medtronic:minimed_670g_mmt-1780_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1780>>-

cpe:2.3:h:medtronic:minimed_670g_mmt-1780:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1781_firmware>>-

cpe:2.3:o:medtronic:minimed_670g_mmt-1781_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1781>>-

cpe:2.3:h:medtronic:minimed_670g_mmt-1781:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1782_firmware>>-

cpe:2.3:o:medtronic:minimed_670g_mmt-1782_firmware:-:*:*:*:*:*:*:*

medtronic>>minimed_670g_mmt-1782>>-

cpe:2.3:h:medtronic:minimed_670g_mmt-1782:-:*:*:*:*:*:*:*

medtronic>>mmt-1151_firmware>>-

cpe:2.3:o:medtronic:mmt-1151_firmware:-:*:*:*:*:*:*:*

medtronic>>mmt-1151>>-

cpe:2.3:h:medtronic:mmt-1151:-:*:*:*:*:*:*:*

medtronic>>mmt-1152_firmware>>-

cpe:2.3:o:medtronic:mmt-1152_firmware:-:*:*:*:*:*:*:*

medtronic>>mmt-1152>>-

cpe:2.3:h:medtronic:mmt-1152:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov
CWE-693	Secondary	security@medtronic.com

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-693

Type: Secondary

Source: security@medtronic.com

References

Hyperlink	Source	Resource
https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed-600-series-communication-issue.html	security@medtronic.com	Mitigation Vendor Advisory
https://www.cisa.gov/uscert/ics/advisories/icsma-22-263-01	security@medtronic.com	Third Party Advisory US Government Resource

Hyperlink: https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed-600-series-communication-issue.html

Source: security@medtronic.com

Resource:

Mitigation

Vendor Advisory

Hyperlink: https://www.cisa.gov/uscert/ics/advisories/icsma-22-263-01

Source: security@medtronic.com

Resource:

Third Party Advisory

US Government Resource

Similar CVEs

2Records found

CVE-2019-13535

Matching Score-6

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

View Details

Matching Score-6

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

CVSS Score-4.6||MEDIUM

EPSS-0.45% / 62.66%

7 Day CHG~0.00%

Published-08 Nov, 2019 | 19:45

Updated-22 May, 2025 | 19:15

Medtronic Valleylab FT10 and LS10 Protection Mechanism Failure

In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) version 1.20.2 and lower, the RFID security mechanism does not apply read protection, allowing for full read access of the RFID security mechanism data.

Vendor-medtronic Medtronic

Product-valleylab_ft10_energy_platform valleylab_ls10_energy_platform valleylab_ls10_energy_platform_firmware valleylab_ft10_energy_platform_firmware Valleylab FT10 Energy Platform (VLFT10GEN)Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States)

CWE ID-CWE-693

Protection Mechanism Failure

CWE ID-CWE-732

Incorrect Permission Assignment for Critical Resource

CVE-2018-10631

Matching Score-6

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

View Details

Matching Score-6

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

CVSS Score-6.3||MEDIUM

EPSS-0.15% / 36.45%

7 Day CHG+0.02%

Published-13 Jul, 2018 | 19:00

Updated-26 Aug, 2025 | 15:15

Medtronic N'Vision Clinician Programmer Protection Mechanism Failure

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer.

Vendor-medtronic Medtronic ics_cert

Product-n\'vision_8840 n\'vision_8870 n\'vision_8870_firmware n\'vision_8840_firmware 8840 N’Vision Clinician Programmer 8870 N’Vision removable Application Card medtronic_n_vision_clinician_programmer

CWE ID-CWE-693

Protection Mechanism Failure

CVE-2022-32537

Credits

Medtronic MiniMed 600 Series Pump System Communication Issue

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs