CVE-2019-6540
Medtronic Conexus Radio Frequency Telemetry Protocol Cleartext Transmission of Sensitive Information
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
26 mar 2019Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement encryption. An attacker with adjacent short-range access to a target product can listen to communications, including the transmission of sensitive data.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Medtronic · Amplia CRT-DMedtronic · Brava CRT-DMedtronic · CareLink 2090 ProgrammerMedtronic · CareLink MonitorMedtronic · Claria CRT-DMedtronic · Compia CRT-DMedtronic · Concerto CRT-DMedtronic · Concerto II CRT-DMedtronic · Conexus Radio Frequency Telemetry ProtocolMedtronic · Consulta CRT-DMedtronic · Evera ICDMedtronic · Maximo II CRT-DMedtronic · Maximo II ICDMedtronic · Mirro ICDMedtronic · Mirro MRI ICDMedtronic · MyCareLink MonitorMedtronic · Nayamed ND ICDMedtronic · Primo ICDMedtronic · Protecta ICD, Protecta CRT-DMedtronic · Secura ICDMedtronic · Virtuoso ICDMedtronic · Virtuoso II ICDMedtronic · Visia AF ICDMedtronic · Viva CRT-D¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →