Telemetry Protocol Vulnerability in Medtronic Cardiac Devices

CVE-2019-6538

What is CVE-2019-6538?

The Conexus telemetry protocol in several Medtronic cardiac devices lacks necessary authentication and authorization mechanisms. This vulnerability allows an attacker with close proximity to the product to potentially inject, modify, or intercept telemetry data communications. As a result, this could lead to unauthorized changes in the memory of implanted cardiac devices, posing significant risks to patient safety.

References