{"id":"CVE-2019-10964","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-10964","generatedAt":"2026-10-28T19:19:37.649Z","title":"An attacker with adjacent access to one of the affected insulin pump models can inject, replay, modify, and/or intercept data.","description":"Medtronic MiniMed Insulin Pumps\n\n are designed to communicate using a wireless RF with other devices, such as blood glucose meters, glucose sensor transmitters, and CareLink USB devices. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker with adjacent access to one of the affected insulin pump models can inject, replay, modify, and/or intercept data. This vulnerability could also allow attackers to change pump settings and control insulin delivery.","published":"2019-06-28T21:15:11.000Z","lastModified":"2026-06-17T02:12:01.000Z","status":"Modified","sourceIdentifier":"ics-cert@hq.dhs.gov","cvss":{"version":"3.1","score":7.1,"severity":"HIGH","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H"},"cwe":["CWE-284","CWE-287","CWE-863"],"affected":["medtronic/minimed 508 firmware","medtronic/minimed paradigm 511 firmware","medtronic/minimed paradigm 512 firmware","medtronic/minimed paradigm 712 firmware","medtronic/minimed paradigm 712e firmware","medtronic/minimed paradigm 515 firmware","medtronic/minimed paradigm 715 firmware","medtronic/minimed paradigm 522 firmware","medtronic/minimed paradigm 722 firmware","medtronic/minimed paradigm 522k firmware","medtronic/minimed paradigm 722k firmware","medtronic/minimed paradigm 523 firmware","medtronic/minimed paradigm 723 firmware","medtronic/minimed paradigm 523k firmware","medtronic/minimed paradigm 723k firmware","medtronic/minimed paradigm veo 554 firmware","medtronic/minimed paradigm veo 754 firmware","medtronic/minimed paradigm veo 554cm firmware","medtronic/minimed paradigm veo 754cm firmware"],"epss":{"score":0.01234,"percentile":0.68873,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.23%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/108926","tags":["Third Party Advisory","VDB Entry"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed-508-paradigm.html","source":"ics-cert@hq.dhs.gov"},{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-178-01","source":"ics-cert@hq.dhs.gov"},{"url":"http://www.securityfocus.com/bid/108926","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.us-cert.gov/ics/advisories/icsma-19-178-01","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-10964","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}