CVE-2022-32537

Medium

Description

A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device; advanced technical knowledge is required for exploitation. Please refer to the Medtronic Product Security Bulletin for guidance

SeverityMedium
CVSS4.8
Exploit probability—
ProductMedtronic Guardian Link 2 Transmitter Mmt-7730 Firmware
PublishedDec 12, 2022
First seenDec 12, 2022
Weakness typeCWE-693CWE-693

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
medtronic guardian_link_2_transmitter_mmt-7730_firmwareNo range specified—
medtronic guardian_link_2_transmitter_mmt-7731_firmwareNo range specified—
medtronic guardian_link_2_transmitter_mmt-7738_firmwareNo range specified—
medtronic guardian_link_2_transmitter_mmt-7775_firmwareNo range specified—
medtronic guardian_link_3_transmitter_mmt-7810_firmwareNo range specified—
medtronic guardian_link_3_transmitter_mmt-7811_firmwareNo range specified—
medtronic minimed_620g_mmt-1750_firmwareNo range specified—
medtronic minimed_630g_mmt-1715_firmwareNo range specified—
medtronic minimed_630g_mmt-1754_firmwareNo range specified—
medtronic minimed_630g_mmt-1755_firmwareNo range specified—
medtronic minimed_640g_mmt-1711_firmwareNo range specified—
medtronic minimed_640g_mmt-1712_firmwareNo range specified—
medtronic minimed_640g_mmt-1751_firmwareNo range specified—
medtronic minimed_640g_mmt-1752_firmwareNo range specified—
medtronic minimed_670g_mmt-1740_firmwareNo range specified—
medtronic minimed_670g_mmt-1741_firmwareNo range specified—
medtronic minimed_670g_mmt-1742_firmwareNo range specified—
medtronic minimed_670g_mmt-1760_firmwareNo range specified—
medtronic minimed_670g_mmt-1761_firmwareNo range specified—
medtronic minimed_670g_mmt-1762_firmwareNo range specified—
medtronic minimed_670g_mmt-1780_firmwareNo range specified—
medtronic minimed_670g_mmt-1781_firmwareNo range specified—
medtronic minimed_670g_mmt-1782_firmwareNo range specified—
medtronic mmt-1151_firmwareNo range specified—
medtronic mmt-1152_firmwareNo range specified—
medtronic mmt-1351_firmwareNo range specified—
medtronic mmt-1352_firmwareNo range specified—
medtronic mmt-7306_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-32537 · Medtronic Guardian Link 2 Transmitter Mmt-7730 Firmware · Dark Radar