What’s Vulnerable › Vulnerabilities

CVE-2019-6540: Medtronic Conexus Radio Frequency Telemetry Protocol Cleartext Transmission of Sensitive Information

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-03-26 · updated 2026-06-17
• Weakness: CWE-319

Description

The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement encryption. An attacker with adjacent short-range access to a target product can listen to communications, including the transmission of sensitive data.

Affected products

• Medtronic Amplia Crt-D Firmware: all versions
• Medtronic Carelink 2090 Firmware: all versions
• Medtronic Carelink Monitor 2490C Firmware: all versions
• Medtronic Claria Crt-D Firmware: all versions
• Medtronic Compia Crt-D Firmware: all versions
• Medtronic Concerto Crt-D Firmware: all versions
• Medtronic Concerto Ii Crt-D Firmware: all versions
• Medtronic Consulta Crt-D Firmware: all versions
• Medtronic Evera Icd Firmware: all versions
• Medtronic Maximo Ii Crt-D Firmware: all versions
• Medtronic Maximo Ii Icd Firmware: all versions
• Medtronic Mirro Icd Firmware: all versions
• Medtronic Mycarelink Monitor 24950 Firmware: all versions
• Medtronic Mycarelink Monitor 24952 Firmware: all versions
• Medtronic Nayamed Nd Icd Firmware: all versions
• Medtronic Primo Icd Firmware: all versions
• Medtronic Protecta Crt-D Firmware: all versions
• Medtronic Protecta Icd Firmware: all versions
• Medtronic Secura Icd Firmware: all versions
• Medtronic Virtuoso Icd Firmware: all versions
• Medtronic Virtuoso Ii Icd Firmware: all versions
• Medtronic Visia Af Icd Firmware: all versions
• Medtronic Viva Crt-D Firmware: all versions

References

• http://www.securityfocus.com/bid/107544
• https://ics-cert.us-cert.gov/advisories/ICSMA-19-080-01
• http://www.securityfocus.com/bid/107544
• https://ics-cert.us-cert.gov/advisories/ICSMA-19-080-01

Get alerted when CVE-2019-6540 or the next vulnerability affects your stack