PT-2022-21355 · Medtronic · Medtronic

Published 2022-11-17 · Updated 2026-05-07 · CVE-2022-32537

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Medtronic (affected versions not specified)

Description A vulnerability exists that could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device, and advanced technical knowledge is required for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2022-32537

Affected Products

Medtronic

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-32537 · Security Note
• https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed-600-series-communication-issue.html · Vendor Advisory
• https://medtronic.com/en-us/e/product-security/security-bulletins/minimed-600-series-communication-issue.html · Note
• https://cisa.gov/uscert/ics/advisories/icsma-22-263-01 · Note
• https://t.me/cveNotify/162573 · Telegram Post
• https://cisa.gov/news-events/ics-medical-advisories/icsma-22-263-01 · Note