High severity7.1NVD Advisory· Published Jun 28, 2019· Updated Jun 17, 2026
CVE-2019-10964
CVE-2019-10964
Description
Medtronic MiniMed Insulin Pumps
are designed to communicate using a wireless RF with other devices, such as blood glucose meters, glucose sensor transmitters, and CareLink USB devices. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker with adjacent access to one of the affected insulin pump models can inject, replay, modify, and/or intercept data. This vulnerability could also allow attackers to change pump settings and control insulin delivery.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
31- cpe:2.3:o:medtronic:minimed_508_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:medtronic:minimed_paradigm_511_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:medtronic:minimed_paradigm_511_firmware:*:*:*:*:*:*:*:*
- (no CPE)range: All versions
cpe:2.3:o:medtronic:minimed_paradigm_512_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:medtronic:minimed_paradigm_512_firmware:*:*:*:*:*:*:*:*
- (no CPE)range: All versions
cpe:2.3:o:medtronic:minimed_paradigm_515_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:medtronic:minimed_paradigm_515_firmware:*:*:*:*:*:*:*:*
- (no CPE)range: All versions
cpe:2.3:o:medtronic:minimed_paradigm_522_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:medtronic:minimed_paradigm_522_firmware:*:*:*:*:*:*:*:*
- (no CPE)range: All versions
cpe:2.3:o:medtronic:minimed_paradigm_522k_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:medtronic:minimed_paradigm_522k_firmware:*:*:*:*:*:*:*:*
- (no CPE)range: All versions
cpe:2.3:o:medtronic:minimed_paradigm_523_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:medtronic:minimed_paradigm_523_firmware:*:*:*:*:*:*:*:*range: <=2.4a
- (no CPE)range: 0
cpe:2.3:o:medtronic:minimed_paradigm_523k_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:medtronic:minimed_paradigm_523k_firmware:*:*:*:*:*:*:*:*range: <=2.4a
- (no CPE)range: 0
- cpe:2.3:o:medtronic:minimed_paradigm_712_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:medtronic:minimed_paradigm_712e_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:medtronic:minimed_paradigm_712e_firmware:*:*:*:*:*:*:*:*
- (no CPE)range: All versions
- cpe:2.3:o:medtronic:minimed_paradigm_715_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:medtronic:minimed_paradigm_722_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:medtronic:minimed_paradigm_722k_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:medtronic:minimed_paradigm_723_firmware:*:*:*:*:*:*:*:*Range: <=2.4a
- cpe:2.3:o:medtronic:minimed_paradigm_723k_firmware:*:*:*:*:*:*:*:*Range: <=2.4a
cpe:2.3:o:medtronic:minimed_paradigm_veo_554_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:medtronic:minimed_paradigm_veo_554_firmware:*:*:*:*:*:*:*:*range: <=2.6a
- (no CPE)range: 0
cpe:2.3:o:medtronic:minimed_paradigm_veo_554cm_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:medtronic:minimed_paradigm_veo_554cm_firmware:*:*:*:*:*:*:*:*range: <=2.7a
- (no CPE)range: 0
- cpe:2.3:o:medtronic:minimed_paradigm_veo_754_firmware:*:*:*:*:*:*:*:*Range: <=2.6a
- cpe:2.3:o:medtronic:minimed_paradigm_veo_754cm_firmware:-:*:*:*:*:*:*:*
- Medtronic/MiniMed 508 pumpv5Range: All versions
Patches
Vulnerability mechanics
References
4- www.securityfocus.com/bid/108926nvdThird Party AdvisoryVDB Entry
- www.us-cert.gov/ics/advisories/icsma-19-178-01nvdThird Party AdvisoryUS Government Resource
- global.medtronic.com/xg-en/product-security/security-bulletins/minimed-508-paradigm.htmlnvd
- www.cisa.gov/news-events/ics-medical-advisories/icsma-19-178-01nvd
News mentions
0No linked articles in our index yet.