CVE-2019-6540: Medtronic Conexus Radio Frequency Telemetry Protocol Cleartext Transmission of Sensitive Information
Medtronic · Conexus Radio Frequency Telemetry Protocol
Vendor fix available · Affected: Medtronic Conexus Radio Frequency Telemetry Protocol · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 9% of scored CVEs
DescriptionCVE.org
The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement encryption. An attacker with adjacent short-range access to a target product can listen to communications, including the transmission of sensitive data.
Affected products20
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Medtronic · Conexus Radio Frequency Telemetry ProtocolAll versions
- Medtronic · MyCareLink Monitor24950; 24952
- Medtronic · CareLink Monitor2490C
- Medtronic · CareLink 2090 ProgrammerAll versions
- Medtronic · Amplia CRT-DAll versions
- Medtronic · Claria CRT-DAll versions
- Medtronic · Compia CRT-DAll versions
- Medtronic · Concerto CRT-DAll versions
- Medtronic · Concerto II CRT-DAll versions
- Medtronic · Consulta CRT-DAll versions
- Medtronic · Evera ICDAll versions
- Medtronic · Maximo II CRT-DAll versions
- Medtronic · Maximo II ICDAll versions
- Medtronic · Mirro ICDAll versions
- Medtronic · Nayamed ND ICDAll versions
- Medtronic · Primo ICDAll versions
- Medtronic · Protecta ICD, Protecta CRT-DAll versions
- Medtronic · Secura ICDAll versions
- Medtronic · Virtuoso ICDAll versions
- Medtronic · Virtuoso II ICDAll versions
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Medtronic
- Published
- March 2019
CoverageNo articles yet
No CyberSIXT article names CVE-2019-6540 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.