Medium severity · published Dec 12, 2022
CVE-2022-32537
A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with…
4.8
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device; advanced technical knowledge is required for exploitation. Please refer to the Medtronic Product Security Bulletin for guidance
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack vector
Adjacent
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GL
Guardian Link 2 Transmitter Mmt-7730 Firmware · Medtronic
All versions, or not specified · source: NVD
GL
Guardian Link 2 Transmitter Mmt-7731 Firmware · Medtronic
All versions, or not specified · source: NVD
GL
Guardian Link 2 Transmitter Mmt-7738 Firmware · Medtronic
All versions, or not specified · source: NVD
GL
Guardian Link 2 Transmitter Mmt-7775 Firmware · Medtronic
All versions, or not specified · source: NVD
GL
Guardian Link 3 Transmitter Mmt-7810 Firmware · Medtronic
All versions, or not specified · source: NVD
GL
Guardian Link 3 Transmitter Mmt-7811 Firmware · Medtronic
All versions, or not specified · source: NVD
M6
Minimed 620g Mmt-1750 Firmware · Medtronic
All versions, or not specified · source: NVD
M6
Minimed 630g Mmt-1715 Firmware · Medtronic
All versions, or not specified · source: NVD
M6
Minimed 630g Mmt-1754 Firmware · Medtronic
All versions, or not specified · source: NVD
M6
Minimed 630g Mmt-1755 Firmware · Medtronic
All versions, or not specified · source: NVD
M6
Minimed 640g Mmt-1711 Firmware · Medtronic
All versions, or not specified · source: NVD
M6
Minimed 640g Mmt-1712 Firmware · Medtronic
All versions, or not specified · source: NVD