description: The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement encryption. An attacker with adjacent short-range access to a target product can listen to communications, including the transmission of sensitive data.
problem types: Cleartext transmission of sensitive information CWE-319
affected:
{
product: Conexus Radio Frequency Telemetry Protocol
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: MyCareLink Monitor
vendor: Medtronic
versions:
status: affected, version: 24950
status: affected, version: 24952
}
{
product: CareLink Monitor
vendor: Medtronic
versions:
status: affected, version: 2490C
}
{
product: CareLink 2090 Programmer
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Amplia CRT-D
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Claria CRT-D
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Compia CRT-D
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Concerto CRT-D
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Concerto II CRT-D
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Consulta CRT-D
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Evera ICD
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Maximo II CRT-D
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Maximo II ICD
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Mirro ICD
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Nayamed ND ICD
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Primo ICD
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Protecta ICD, Protecta CRT-D
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Secura ICD
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Virtuoso ICD
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Virtuoso II ICD
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Visia AF ICD
vendor: Medtronic
versions:
status: affected, version: n/a
}
{
product: Viva CRT-D
vendor: Medtronic
versions:
status: affected, version: n/a
}
