Details of VAR-201903-0181

ID

VAR-201903-0181

CVE

CVE-2019-6538

TITLE

plural Medtronic Access control vulnerabilities in products

Trust: 0.8

sources: JVNDB: JVNDB-2019-003087

DESCRIPTION

The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement authentication or authorization. An attacker with adjacent short-range access to an affected product, in situations where the product’s radio is turned on, can inject, replay, modify, and/or intercept data within the telemetry communication. This communication protocol provides the ability to read and write memory values to affected implanted cardiac devices; therefore, an attacker could exploit this communication protocol to change memory in the implanted cardiac device. plural Medtronic The product contains an access control vulnerability.Information may be tampered with. MyCareLink Monitor and others are products developed by Medtronic. Medtronic Conexus Radio Frequency Telemetry Protocol is prone to multiple security vulnerabilities. An attacker can exploit this issue to gain access to sensitive information and bypass the security mechanism and gain unauthorized access. This may lead to further attacks

Trust: 2.7

sources: NVD: CVE-2019-6538 // JVNDB: JVNDB-2019-003087 // CNVD: CNVD-2019-09067 // BID: 107544 // IVD: c60800b1-5282-4def-ab94-14b4a596d36e // VULHUB: VHN-157973

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: c60800b1-5282-4def-ab94-14b4a596d36e // CNVD: CNVD-2019-09067

AFFECTED PRODUCTS

vendor:	medtronic	model:	mycarelink monitor	scope:	eq	version:	24950	Trust: 2.4
vendor:	medtronic	model:	mycarelink monitor	scope:	eq	version:	24952	Trust: 2.4
vendor:	medtronic	model:	carelink monitor	scope:	eq	version:	2490c	Trust: 1.8
vendor:	medtronic	model:	evera icd	scope:	-	version:	-	Trust: 1.4
vendor:	medtronic	model:	consulta crt-d	scope:	-	version:	-	Trust: 1.4
vendor:	medtronic	model:	concerto ii crt-d	scope:	-	version:	-	Trust: 1.4
vendor:	medtronic	model:	concerto crt-d	scope:	-	version:	-	Trust: 1.4
vendor:	medtronic	model:	compia crt-d	scope:	-	version:	-	Trust: 1.4
vendor:	medtronic	model:	claria crt-d	scope:	-	version:	-	Trust: 1.4
vendor:	medtronic	model:	protecta icd and crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	viva crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	virtuoso icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	maximo ii crt-d and lcd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	evera icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	concerto ii crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	primo icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	nayamed nd icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	mirro icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	consulta crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	claria crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	virtuoso ii icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	compia crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	secura icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	concerto crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	visia af icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	carelink 2090	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	amplia crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	carelink monitor 2490c	scope:	-	version:	-	Trust: 0.9
vendor:	medtronic	model:	carelink 2090	scope:	-	version:	-	Trust: 0.8
vendor:	medtronic	model:	maximo ii crt-d and lcd	scope:	-	version:	-	Trust: 0.8
vendor:	medtronic	model:	carelink programmer	scope:	eq	version:	2090	Trust: 0.6
vendor:	medtronic	model:	primo icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	protecta icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	protecta crt-d	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	secura icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	virtuoso icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	virtuoso ii icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	visia af icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	viva crt-d	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	amplia crt-d	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	nayamed nd icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	mirro icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	maximo ii icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	maximo ii crt-d	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	viva crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	visia af icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	virtuoso ii icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	virtuoso icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	secura icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	protecta icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	protecta crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	primo icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	mirro icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	maximo ii crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	maximo icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	evera icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	consulta crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	concerto ii crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	concerto crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	compia crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	claria crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	carelink programmer	scope:	eq	version:	20900	Trust: 0.3
vendor:	medtronic	model:	amplia crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	mycarelink monitor	scope:	eq	version:	249520	Trust: 0.3
vendor:	medtronic	model:	mycarelink monitor	scope:	eq	version:	249500	Trust: 0.3
vendor:	mycarelink monitor	model:	-	scope:	eq	version:	24950	Trust: 0.2
vendor:	mycarelink monitor	model:	-	scope:	eq	version:	24952	Trust: 0.2
vendor:	evera icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	maximo ii crt d and lcd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	mirro icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	nayamed nd icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	primo icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	protecta icd and crt d	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	secura icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	virtuoso icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	virtuoso ii icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	visia af icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	carelink monitor	model:	2490c	scope:	-	version:	-	Trust: 0.2
vendor:	viva crt d	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	carelink 2090	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	amplia crt d	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	claria crt d	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	compia crt d	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	concerto crt d	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	concerto ii crt d	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	consulta crt d	model:	-	scope:	eq	version:	-	Trust: 0.2

sources: IVD: c60800b1-5282-4def-ab94-14b4a596d36e // CNVD: CNVD-2019-09067 // BID: 107544 // JVNDB: JVNDB-2019-003087 // NVD: CVE-2019-6538

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-6538
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2019-6538
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2019-09067
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-201903-836
value:	MEDIUM
Trust: 0.6
IVD:	c60800b1-5282-4def-ab94-14b4a596d36e
value:	MEDIUM
Trust: 0.2
VULHUB:	VHN-157973
value:	LOW
Trust: 0.1

nvd@nist.gov:	CVE-2019-6538
severity:	LOW
baseScore:	3.3
vectorString:	AV:A/AC:L/AU:N/C:N/I:P/A:N
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	6.5
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2019-09067
severity:	HIGH
baseScore:	9.4
vectorString:	AV:N/AC:L/AU:N/C:N/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	9.2
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	c60800b1-5282-4def-ab94-14b4a596d36e
severity:	HIGH
baseScore:	9.4
vectorString:	AV:N/AC:L/AU:N/C:N/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	9.2
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2
VULHUB:	VHN-157973
severity:	LOW
baseScore:	3.3
vectorString:	AV:A/AC:L/AU:N/C:N/I:P/A:N
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	6.5
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2019-6538
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	2.8
impactScore:	3.6
version:	3.1
Trust: 1.0
NVD:	CVE-2019-6538
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
attackVector:	ADJACENT NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: IVD: c60800b1-5282-4def-ab94-14b4a596d36e // CNVD: CNVD-2019-09067 // VULHUB: VHN-157973 // JVNDB: JVNDB-2019-003087 // CNNVD: CNNVD-201903-836 // NVD: CVE-2019-6538

PROBLEMTYPE DATA

problemtype:	CWE-284	Trust: 1.9
problemtype:	CWE-306	Trust: 1.1
problemtype:	CWE-862	Trust: 1.1

sources: VULHUB: VHN-157973 // JVNDB: JVNDB-2019-003087 // NVD: CVE-2019-6538

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-201903-836

TYPE

Access control error

Trust: 0.8

sources: IVD: c60800b1-5282-4def-ab94-14b4a596d36e // CNNVD: CNNVD-201903-836

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-003087

PATCH

title:

Top Page

url:

https://www.medtronicdiabetes.com/home

Trust: 0.8

sources: JVNDB: JVNDB-2019-003087

EXTERNAL IDS

db:	NVD	id:	CVE-2019-6538	Trust: 3.6
db:	ICS CERT	id:	ICSMA-19-080-01	Trust: 3.4
db:	BID	id:	107544	Trust: 2.6
db:	CNNVD	id:	CNNVD-201903-836	Trust: 0.9
db:	CNVD	id:	CNVD-2019-09067	Trust: 0.8
db:	JVNDB	id:	JVNDB-2019-003087	Trust: 0.8
db:	AUSCERT	id:	ESB-2019.0950.2	Trust: 0.6
db:	IVD	id:	C60800B1-5282-4DEF-AB94-14B4A596D36E	Trust: 0.2
db:	VULHUB	id:	VHN-157973	Trust: 0.1

sources: IVD: c60800b1-5282-4def-ab94-14b4a596d36e // CNVD: CNVD-2019-09067 // VULHUB: VHN-157973 // BID: 107544 // JVNDB: JVNDB-2019-003087 // CNNVD: CNNVD-201903-836 // NVD: CVE-2019-6538

REFERENCES

url:	https://ics-cert.us-cert.gov/advisories/icsma-19-080-01	Trust: 3.4
url:	http://www.securityfocus.com/bid/107544	Trust: 2.3
url:	https://nvd.nist.gov/vuln/detail/cve-2019-6538	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-6538	Trust: 0.8
url:	https://www.auscert.org.au/bulletins/esb-2019.0950.2/	Trust: 0.6
url:	https://us-cert.cisa.gov/ics/advisories/icsma-19-080-01	Trust: 0.6
url:	https://www.us-cert.gov/ics/advisories/icsma-19-080-01	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/77634	Trust: 0.6
url:	http://www.medtronic.com	Trust: 0.3

sources: CNVD: CNVD-2019-09067 // VULHUB: VHN-157973 // BID: 107544 // JVNDB: JVNDB-2019-003087 // CNNVD: CNNVD-201903-836 // NVD: CVE-2019-6538

CREDITS

currently with University of Birmingham; Flavio D. Garcia; Tom Chothia of the University of Birmingham; and Rik Willems of University Hospital Gasthuisberg Leuven reported these vulnerabilities to NCCIC.,Peter Morgan of Clever Security; Dave SingelA?e and Bart Preneel of KU Leuven; Eduard Marin formerly of KU Leuven,Peter Morgan of Clever Security; Dave Singelée and Bart Preneel of KU Leuven; Eduard Marin formerly of KU Leuven, currently with University of Birmingham; Flavio D. Garcia; Tom Chothia of the University of Birmingham; and Rik Willems of University Hospita,Peter Morgan of Clever Security; Dave Singel??e and Bart Preneel of KU Leuven; Eduard Marin formerly of KU Leuven

Trust: 0.6

sources: CNNVD: CNNVD-201903-836

SOURCES

db:	IVD	id:	c60800b1-5282-4def-ab94-14b4a596d36e
db:	CNVD	id:	CNVD-2019-09067
db:	VULHUB	id:	VHN-157973
db:	BID	id:	107544
db:	JVNDB	id:	JVNDB-2019-003087
db:	CNNVD	id:	CNNVD-201903-836
db:	NVD	id:	CVE-2019-6538

LAST UPDATE DATE

2024-08-14T14:51:16.660000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2019-09067	date:	2019-04-04T00:00:00
db:	VULHUB	id:	VHN-157973	date:	2020-10-06T00:00:00
db:	BID	id:	107544	date:	2019-03-21T00:00:00
db:	JVNDB	id:	JVNDB-2019-003087	date:	2019-05-09T00:00:00
db:	CNNVD	id:	CNNVD-201903-836	date:	2021-04-09T00:00:00
db:	NVD	id:	CVE-2019-6538	date:	2020-10-06T13:19:18.203

SOURCES RELEASE DATE

db:	IVD	id:	c60800b1-5282-4def-ab94-14b4a596d36e	date:	2019-04-04T00:00:00
db:	CNVD	id:	CNVD-2019-09067	date:	2019-04-04T00:00:00
db:	VULHUB	id:	VHN-157973	date:	2019-03-25T00:00:00
db:	BID	id:	107544	date:	2019-03-21T00:00:00
db:	JVNDB	id:	JVNDB-2019-003087	date:	2019-05-09T00:00:00
db:	CNNVD	id:	CNNVD-201903-836	date:	2019-03-21T00:00:00
db:	NVD	id:	CVE-2019-6538	date:	2019-03-25T22:29:00.763