Medtronic Paradigm Wireless Insulin Pump Denial of Service Vulnerability

Bugtraq ID:	49493
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-3386
Remote:	Yes
Local:	No
Published:	Sep 07 2011 12:00AM
Updated:	Sep 07 2011 12:00AM
Credit:	Jerome Radcliffe at the Black Hat USA
Vulnerable:	Medtronic Paradigm 722 0 Medtronic Paradigm 712 Medtronic Paradigm 522 Medtronic Paradigm 512
Not Vulnerable:

Medtronic Paradigm Wireless Insulin Pump Denial of Service Vulnerability

Medtronic Paradigm wireless insulin pump is prone to a denial-of-service vulnerability.

Successful exploits will cause the device to crash, denying service to legitimate users.

Medtronic Paradigm wireless insulin pump:

512
522
712
722

Medtronic Paradigm Wireless Insulin Pump Denial of Service Vulnerability

An attacker can exploit this issue by using readily available network utilities.

Medtronic Paradigm Wireless Insulin Pump Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Medtronic Paradigm Wireless Insulin Pump Denial of Service Vulnerability

References:

• Black Hat: Insulin pumps can be hacked (Dan Kaplan)
  
• Vendor Homepage (Medtronic)