CVE:CVE-2018-10634
CNNVD:CNNVD-201808-306
Medtronic MMT-508 MiniMed insulin pump等都是美国Medtronic公司的不同型号的胰岛素泵。
多款Medtronic产品中存在信息泄露漏洞，该漏洞源于pump和无线配件之间通信以明文的形式进行传递。攻击者可利用该漏洞截获所传递的信息并提取敏感信息（例如：设备序列号）。以下产品受到影响：Medtronic MMT - 508 MiniMed insulin pump；MMT - 522 Paradigm REAL-TIME；MMT - 722 Paradigm REAL-TIME；MMT - 523 Paradigm Revel；MMT - 723 Paradigm Revel；MMT - 523K Paradigm Revel；MMT - 723K Paradigm Revel；MMT - 551 MiniMed 530G；MMT - 751 MiniMed 530G。
solution:Upgrade medtronic minimed_paradigm_revel_mmt-523k_firmware to a higher version than -; Upgrade medtronic minimed_paradigm_revel_mmt-723k_firmware to a higher version than -; Upgrade medtronic minimed_paradigm_revel_mmt-723_firmware to a higher version than -; Upgrade medtronic minimed_530g_mmt-551_firmware to a higher version than -; Upgrade medtronic minimed_paradigm_real-time_mmt-522_firmware to a higher version than -; Upgrade medtronic minimed_paradigm_real-time_mmt-722_firmware to a higher version than -; Upgrade medtronic minimed_530g_mmt-751_firmware to a higher version than -; Upgrade medtronic minimed_paradigm_revel_mmt-523_firmware to a higher version than -; Upgrade medtronic minimed_paradigm_508_insulin_pump_firmware to a higher version than -