Insulin Pump Vulnerability in Medtronic Devices

CVE-2019-10964

What is CVE-2019-10964?

Affected Medtronic insulin pumps utilize a wireless RF communication protocol that lacks essential authentication and authorization measures. This vulnerability permits attackers with close physical access to inject, replay, modify, or intercept data communicated between the pumps and compatible devices such as blood glucose meters and CareLink USB devices. Consequently, unauthorized individuals may manipulate pump settings, adversely impacting insulin delivery and patient safety.

References