CVE-2019-6540
Summary
| CVE | CVE-2019-6540 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-03-26 18:29:00 UTC |
| Updated | 2021-11-03 18:57:00 UTC |
| Description | The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement encryption. An attacker with adjacent short-range access to a target product can listen to communications, including the transmission of sensitive data. |
Risk And Classification
Problem Types: CWE-319
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Medtronic | Amplia Crt-d | - | All | All | All |
| Hardware | Medtronic | Amplia Crt-d | - | All | All | All |
| Operating System | Medtronic | Amplia Crt-d Firmware | - | All | All | All |
| Operating System | Medtronic | Amplia Crt-d Firmware | - | All | All | All |
| Hardware | Medtronic | Carelink 2090 | - | All | All | All |
| Hardware | Medtronic | Carelink 2090 | - | All | All | All |
| Operating System | Medtronic | Carelink 2090 Firmware | - | All | All | All |
| Operating System | Medtronic | Carelink 2090 Firmware | - | All | All | All |
| Hardware | Medtronic | Carelink Monitor 2490c | - | All | All | All |
| Hardware | Medtronic | Carelink Monitor 2490c | - | All | All | All |
| Operating System | Medtronic | Carelink Monitor 2490c Firmware | - | All | All | All |
| Operating System | Medtronic | Carelink Monitor 2490c Firmware | - | All | All | All |
| Hardware | Medtronic | Claria Crt-d | - | All | All | All |
| Hardware | Medtronic | Claria Crt-d | - | All | All | All |
| Operating System | Medtronic | Claria Crt-d Firmware | - | All | All | All |
| Operating System | Medtronic | Claria Crt-d Firmware | - | All | All | All |
| Hardware | Medtronic | Compia Crt-d | - | All | All | All |
| Hardware | Medtronic | Compia Crt-d | - | All | All | All |
| Operating System | Medtronic | Compia Crt-d Firmware | - | All | All | All |
| Operating System | Medtronic | Compia Crt-d Firmware | - | All | All | All |
| Hardware | Medtronic | Concerto Crt-d | - | All | All | All |
| Hardware | Medtronic | Concerto Crt-d | - | All | All | All |
| Operating System | Medtronic | Concerto Crt-d Firmware | - | All | All | All |
| Operating System | Medtronic | Concerto Crt-d Firmware | - | All | All | All |
| Hardware | Medtronic | Concerto Ii Crt-d | - | All | All | All |
| Hardware | Medtronic | Concerto Ii Crt-d | - | All | All | All |
| Operating System | Medtronic | Concerto Ii Crt-d Firmware | - | All | All | All |
| Operating System | Medtronic | Concerto Ii Crt-d Firmware | - | All | All | All |
| Hardware | Medtronic | Consulta Crt-d | - | All | All | All |
| Hardware | Medtronic | Consulta Crt-d | - | All | All | All |
| Operating System | Medtronic | Consulta Crt-d Firmware | - | All | All | All |
| Operating System | Medtronic | Consulta Crt-d Firmware | - | All | All | All |
| Hardware | Medtronic | Evera Icd | - | All | All | All |
| Hardware | Medtronic | Evera Icd | - | All | All | All |
| Operating System | Medtronic | Evera Icd Firmware | - | All | All | All |
| Operating System | Medtronic | Evera Icd Firmware | - | All | All | All |
| Hardware | Medtronic | Maximo Ii Crt-d | - | All | All | All |
| Hardware | Medtronic | Maximo Ii Crt-d | - | All | All | All |
| Operating System | Medtronic | Maximo Ii Crt-d Firmware | - | All | All | All |
| Operating System | Medtronic | Maximo Ii Crt-d Firmware | - | All | All | All |
| Hardware | Medtronic | Maximo Ii Icd | - | All | All | All |
| Hardware | Medtronic | Maximo Ii Icd | - | All | All | All |
| Operating System | Medtronic | Maximo Ii Icd Firmware | - | All | All | All |
| Operating System | Medtronic | Maximo Ii Icd Firmware | - | All | All | All |
| Hardware | Medtronic | Mirro Icd | - | All | All | All |
| Hardware | Medtronic | Mirro Icd | - | All | All | All |
| Operating System | Medtronic | Mirro Icd Firmware | - | All | All | All |
| Operating System | Medtronic | Mirro Icd Firmware | - | All | All | All |
| Hardware | Medtronic | Mycarelink Monitor 24950 | - | All | All | All |
| Hardware | Medtronic | Mycarelink Monitor 24950 | - | All | All | All |
| Operating System | Medtronic | Mycarelink Monitor 24950 Firmware | - | All | All | All |
| Operating System | Medtronic | Mycarelink Monitor 24950 Firmware | - | All | All | All |
| Hardware | Medtronic | Mycarelink Monitor 24952 | - | All | All | All |
| Hardware | Medtronic | Mycarelink Monitor 24952 | - | All | All | All |
| Operating System | Medtronic | Mycarelink Monitor 24952 Firmware | - | All | All | All |
| Operating System | Medtronic | Mycarelink Monitor 24952 Firmware | - | All | All | All |
| Hardware | Medtronic | Nayamed Nd Icd | - | All | All | All |
| Hardware | Medtronic | Nayamed Nd Icd | - | All | All | All |
| Operating System | Medtronic | Nayamed Nd Icd Firmware | - | All | All | All |
| Operating System | Medtronic | Nayamed Nd Icd Firmware | - | All | All | All |
| Hardware | Medtronic | Primo Icd | - | All | All | All |
| Hardware | Medtronic | Primo Icd | - | All | All | All |
| Operating System | Medtronic | Primo Icd Firmware | - | All | All | All |
| Operating System | Medtronic | Primo Icd Firmware | - | All | All | All |
| Hardware | Medtronic | Protecta Crt-d | - | All | All | All |
| Hardware | Medtronic | Protecta Crt-d | - | All | All | All |
| Operating System | Medtronic | Protecta Crt-d Firmware | - | All | All | All |
| Operating System | Medtronic | Protecta Crt-d Firmware | - | All | All | All |
| Hardware | Medtronic | Protecta Icd | - | All | All | All |
| Hardware | Medtronic | Protecta Icd | - | All | All | All |
| Operating System | Medtronic | Protecta Icd Firmware | - | All | All | All |
| Operating System | Medtronic | Protecta Icd Firmware | - | All | All | All |
| Hardware | Medtronic | Secura Icd | - | All | All | All |
| Hardware | Medtronic | Secura Icd | - | All | All | All |
| Operating System | Medtronic | Secura Icd Firmware | - | All | All | All |
| Operating System | Medtronic | Secura Icd Firmware | - | All | All | All |
| Hardware | Medtronic | Virtuoso Icd | - | All | All | All |
| Hardware | Medtronic | Virtuoso Icd | - | All | All | All |
| Operating System | Medtronic | Virtuoso Icd Firmware | - | All | All | All |
| Operating System | Medtronic | Virtuoso Icd Firmware | - | All | All | All |
| Hardware | Medtronic | Virtuoso Ii Icd | - | All | All | All |
| Hardware | Medtronic | Virtuoso Ii Icd | - | All | All | All |
| Operating System | Medtronic | Virtuoso Ii Icd Firmware | - | All | All | All |
| Operating System | Medtronic | Virtuoso Ii Icd Firmware | - | All | All | All |
| Hardware | Medtronic | Visia Af Icd | - | All | All | All |
| Hardware | Medtronic | Visia Af Icd | - | All | All | All |
| Operating System | Medtronic | Visia Af Icd Firmware | - | All | All | All |
| Operating System | Medtronic | Visia Af Icd Firmware | - | All | All | All |
| Hardware | Medtronic | Viva Crt-d | - | All | All | All |
| Hardware | Medtronic | Viva Crt-d | - | All | All | All |
| Operating System | Medtronic | Viva Crt-d Firmware | - | All | All | All |
| Operating System | Medtronic | Viva Crt-d Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Medtronic Conexus Radio Frequency Telemetry Protocol Multiple Security Vulnerabilities | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Medtronic Conexus Radio Frequency Telemetry Protocol | CISA | MISC | ics-cert.us-cert.gov | Third Party Advisory, US Government Resource |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.