High severity7.1NVD Advisory· Published Jun 28, 2019· Updated Jun 17, 2026
CVE-2019-10964
CVE-2019-10964
Description
Medtronic MiniMed Insulin Pumps
are designed to communicate using a wireless RF with other devices, such as blood glucose meters, glucose sensor transmitters, and CareLink USB devices. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker with adjacent access to one of the affected insulin pump models can inject, replay, modify, and/or intercept data. This vulnerability could also allow attackers to change pump settings and control insulin delivery.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
31- cpe:2.3:o:medtronic:minimed_508_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:medtronic:minimed_paradigm_511_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:medtronic:minimed_paradigm_512_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:medtronic:minimed_paradigm_515_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:medtronic:minimed_paradigm_522_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:medtronic:minimed_paradigm_522k_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:medtronic:minimed_paradigm_523_firmware:*:*:*:*:*:*:*:*Range: <=2.4a
- cpe:2.3:o:medtronic:minimed_paradigm_523k_firmware:*:*:*:*:*:*:*:*Range: <=2.4a
- cpe:2.3:o:medtronic:minimed_paradigm_712_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:medtronic:minimed_paradigm_712e_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:medtronic:minimed_paradigm_715_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:medtronic:minimed_paradigm_722_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:medtronic:minimed_paradigm_722k_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:medtronic:minimed_paradigm_723_firmware:*:*:*:*:*:*:*:*Range: <=2.4a
- cpe:2.3:o:medtronic:minimed_paradigm_723k_firmware:*:*:*:*:*:*:*:*Range: <=2.4a
- cpe:2.3:o:medtronic:minimed_paradigm_veo_554_firmware:*:*:*:*:*:*:*:*Range: <=2.6a
- cpe:2.3:o:medtronic:minimed_paradigm_veo_554cm_firmware:*:*:*:*:*:*:*:*Range: <=2.7a
- cpe:2.3:o:medtronic:minimed_paradigm_veo_754_firmware:*:*:*:*:*:*:*:*Range: <=2.6a
- cpe:2.3:o:medtronic:minimed_paradigm_veo_754cm_firmware:-:*:*:*:*:*:*:*
- Medtronic/MiniMed 508 pumpv5Range: All versions
- Medtronic/MiniMed Paradigm 511 pumpv5Range: All versions
- Medtronic/MiniMed Paradigm 512/712 pumpsv5Range: All versions
- Medtronic/MiniMed Paradigm 515/715 pumpsv5Range: All versions
- Medtronic/MiniMed Paradigm 522/722 pumpsv5Range: All versions
- Medtronic/MiniMed Paradigm 522K/722K pumpsv5Range: All versions
- Medtronic/MiniMed Paradigm 523/723 pumpsv5Range: 0
- Medtronic/MiniMed Paradigm 523K/723K pumpsv5Range: 0
- Medtronic/MiniMed Paradigm 712E pumpv5Range: All versions
- Medtronic/MiniMed Paradigm Veo 554/754 pumpsv5Range: 0
- Medtronic/MiniMed Paradigm Veo 554CM/754CM pumpsv5Range: 0
Patches
Vulnerability mechanics
References
4- www.securityfocus.com/bid/108926nvdThird Party AdvisoryVDB Entry
- www.us-cert.gov/ics/advisories/icsma-19-178-01nvdThird Party AdvisoryUS Government Resource
- global.medtronic.com/xg-en/product-security/security-bulletins/minimed-508-paradigm.htmlnvd
- www.cisa.gov/news-events/ics-medical-advisories/icsma-19-178-01nvd
News mentions
0No linked articles in our index yet.