CVE-2022-32537
Medtronic MiniMed 600 Series Pump System Communication Issue
- State
- Published
- Severity
- 4.8 Medium
- Published
- Nov 17, 2022
- Updated
- May 7, 2026
- Reserved
- Jun 7, 2022
Description
A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device; advanced technical knowledge is required for exploitation. Please refer to the Medtronic Product Security Bulletin for guidance
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.8 Medium | CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N | Medtronic |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Minimed 600 Series Insulin PumpMedtronic |
|
References
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-22-263-01
- https://www.medtronic.com/en-us/e/product-security/security-bulletins/minimed-600-series-communication-issue.html
- https://www.cisa.gov/uscert/ics/advisories/icsma-22-263-01
- https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed-600-series-communication-issue.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.