What’s Vulnerable › Vulnerabilities

CVE-2018-10634: Medtronic MiniMed MMT-500/MMT-503 Remote Controllers Cleartext Transmission of Sensitive Information

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-13 · updated 2026-06-17
• Weakness: CWE-319

Description

Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted in cleartext. A sufficiently skilled attacker could capture these transmissions and extract sensitive information, such as device serial numbers.

Affected products

• Medtronic Minimed 530G Mmt-551 Firmware: all versions
• Medtronic Minimed 530G Mmt-751 Firmware: all versions
• Medtronic Minimed Paradigm 508 Insulin Pump Firmware: all versions
• Medtronic Minimed Paradigm Real-Time Mmt-522 Firmware: all versions
• Medtronic Minimed Paradigm Real-Time Mmt-722 Firmware: all versions
• Medtronic Minimed Paradigm Revel Mmt-523 Firmware: all versions
• Medtronic Minimed Paradigm Revel Mmt-523K Firmware: all versions
• Medtronic Minimed Paradigm Revel Mmt-723 Firmware: all versions
• Medtronic Minimed Paradigm Revel Mmt-723K Firmware: all versions

References

• http://www.securityfocus.com/bid/105044
• https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed.html
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-02
• http://www.securityfocus.com/bid/105044
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-02

Get alerted when CVE-2018-10634 or the next vulnerability affects your stack