Riskcovery

CVE-2018-10634

Medtronic MiniMed MMT-500/MMT-503 Remote Controllers Cleartext Transmission of Sensitive Information

State
Published
Severity
4.8 Medium
Published
Aug 13, 2018
Updated
May 22, 2025
Reserved
May 1, 2018

Read the record on cve.org

Description

Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted in cleartext. A sufficiently skilled attacker could capture these transmissions and extract sensitive information, such as device serial numbers.

Scores

CVSSScoreVectorSource
3.14.8 MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:Nicscert

Weaknesses

  • CWE-319 Cleartext Transmission of Sensitive Information

Affected Products

ProductVersions
MMT- 508 - MiniMed pumpMedtronic
  • All versionsAffected
MMT – 511 pump ParadigmMedtronic
  • All versionsAffected
MMT – 512 / MMT – 712 Paradigm x12Medtronic
  • All versionsAffected
MMT – 515 / MMT – 715 Paradigm x15Medtronic
  • All versionsAffected
MMT – 522 / MMT – 722 Paradigm REAL-TIMEMedtronic
  • All versionsAffected
MMT – 522(K) / MMT – 722(K) Paradigm REAL-TIMEMedtronic
  • All versionsAffected
MMT – 523 / MMT – 723 Paradigm RevelMedtronic
  • All versionsAffected
MMT – 523(K) / MMT – 723(K) ParadigmMedtronic
  • All versionsAffected
MMT – 554 / MMT – 754 MiniMed VeoMedtronic
  • All versionsAffected
MMT – 551 / MMT – 751 MiniMed 530GMedtronic
  • All versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.