Details of VAR-201903-1617

ID

VAR-201903-1617

CVE

CVE-2019-6540

TITLE

plural Medtronic Cryptographic vulnerabilities in products

Trust: 0.8

sources: JVNDB: JVNDB-2019-003225

DESCRIPTION

The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement encryption. An attacker with adjacent short-range access to a target product can listen to communications, including the transmission of sensitive data. plural Medtronic The product contains cryptographic vulnerabilities.Information may be obtained. MyCareLink Monitor and others are products developed by Medtronic. An access control error vulnerability exists in several Medtronic products that stems from the failure of the Conexus telemetry protocol to perform cryptographic operations that an attacker can use to intercept communications (including sensitive information transmitted). Medtronic Conexus Radio Frequency Telemetry Protocol is prone to multiple security vulnerabilities. An attacker can exploit this issue to gain access to sensitive information and bypass the security mechanism and gain unauthorized access. This may lead to further attacks

Trust: 2.7

sources: NVD: CVE-2019-6540 // JVNDB: JVNDB-2019-003225 // CNVD: CNVD-2019-09066 // BID: 107544 // IVD: 1e9dad07-7958-4810-ac1e-1cb019c0c368 // VULHUB: VHN-157975

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: 1e9dad07-7958-4810-ac1e-1cb019c0c368 // CNVD: CNVD-2019-09066

AFFECTED PRODUCTS

vendor:	medtronic	model:	carelink monitor 2490c	scope:	-	version:	-	Trust: 1.7
vendor:	medtronic	model:	amplia crt-d	scope:	-	version:	-	Trust: 1.4
vendor:	medtronic	model:	consulta crt-d	scope:	-	version:	-	Trust: 1.4
vendor:	medtronic	model:	concerto ii crt-d	scope:	-	version:	-	Trust: 1.4
vendor:	medtronic	model:	concerto crt-d	scope:	-	version:	-	Trust: 1.4
vendor:	medtronic	model:	compia crt-d	scope:	-	version:	-	Trust: 1.4
vendor:	medtronic	model:	claria crt-d	scope:	-	version:	-	Trust: 1.4
vendor:	medtronic	model:	virtuoso icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	maximo ii crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	evera icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	concerto ii crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	maximo ii icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	primo icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	amplia crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	nayamed nd icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	mirro icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	mycarelink monitor 24952	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	consulta crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	claria crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	virtuoso ii icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	compia crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	protecta crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	secura icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	concerto crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	visia af icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	carelink 2090	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	protecta icd	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	viva crt-d	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	mycarelink monitor 24950	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	carelink monitor 2490c	scope:	eq	version:	-	Trust: 1.0
vendor:	medtronic	model:	24950 mycarelink monitor	scope:	-	version:	-	Trust: 0.8
vendor:	medtronic	model:	24952 mycarelink monitor	scope:	-	version:	-	Trust: 0.8
vendor:	medtronic	model:	carelink 2090	scope:	-	version:	-	Trust: 0.8
vendor:	medtronic	model:	carelink programmer	scope:	eq	version:	2090	Trust: 0.6
vendor:	medtronic	model:	mycarelink monitor	scope:	eq	version:	24950	Trust: 0.6
vendor:	medtronic	model:	mycarelink monitor	scope:	eq	version:	24952	Trust: 0.6
vendor:	medtronic	model:	primo icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	protecta icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	protecta crt-d	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	secura icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	virtuoso icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	virtuoso ii icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	visia af icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	viva crt-d	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	nayamed nd icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	mirro icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	maximo ii icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	maximo ii crt-d	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	evera icd	scope:	-	version:	-	Trust: 0.6
vendor:	medtronic	model:	viva crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	visia af icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	virtuoso ii icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	virtuoso icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	secura icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	protecta icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	protecta crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	primo icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	mirro icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	maximo ii crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	maximo icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	evera icd	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	consulta crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	concerto ii crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	concerto crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	compia crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	claria crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	carelink programmer	scope:	eq	version:	20900	Trust: 0.3
vendor:	medtronic	model:	amplia crt-d	scope:	eq	version:	0	Trust: 0.3
vendor:	medtronic	model:	mycarelink monitor	scope:	eq	version:	249520	Trust: 0.3
vendor:	medtronic	model:	mycarelink monitor	scope:	eq	version:	249500	Trust: 0.3
vendor:	mycarelink monitor 24950	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	consulta crt d	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	evera icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	maximo ii crt d	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	maximo ii icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	mirro icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	nayamed nd icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	primo icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	protecta icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	protecta crt d	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	secura icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	mycarelink monitor 24952	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	virtuoso icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	virtuoso ii icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	visia af icd	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	viva crt d	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	carelink monitor 2490c	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	carelink 2090	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	amplia crt d	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	claria crt d	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	compia crt d	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	concerto crt d	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	concerto ii crt d	model:	-	scope:	eq	version:	-	Trust: 0.2

sources: IVD: 1e9dad07-7958-4810-ac1e-1cb019c0c368 // CNVD: CNVD-2019-09066 // BID: 107544 // JVNDB: JVNDB-2019-003225 // NVD: CVE-2019-6540

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-6540
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2019-6540
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2019-09066
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-201903-831
value:	MEDIUM
Trust: 0.6
IVD:	1e9dad07-7958-4810-ac1e-1cb019c0c368
value:	MEDIUM
Trust: 0.2
VULHUB:	VHN-157975
value:	LOW
Trust: 0.1

nvd@nist.gov:	CVE-2019-6540
severity:	LOW
baseScore:	3.3
vectorString:	AV:A/AC:L/AU:N/C:P/I:N/A:N
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	6.5
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2019-09066
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:C/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	1e9dad07-7958-4810-ac1e-1cb019c0c368
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:C/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2
VULHUB:	VHN-157975
severity:	LOW
baseScore:	3.3
vectorString:	AV:A/AC:L/AU:N/C:P/I:N/A:N
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	6.5
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2019-6540
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	2.8
impactScore:	3.6
version:	3.1
Trust: 1.0
NVD:	CVE-2019-6540
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector:	ADJACENT NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: IVD: 1e9dad07-7958-4810-ac1e-1cb019c0c368 // CNVD: CNVD-2019-09066 // VULHUB: VHN-157975 // JVNDB: JVNDB-2019-003225 // CNNVD: CNNVD-201903-831 // NVD: CVE-2019-6540

PROBLEMTYPE DATA

problemtype:	CWE-319	Trust: 1.1
problemtype:	CWE-310	Trust: 0.9

sources: VULHUB: VHN-157975 // JVNDB: JVNDB-2019-003225 // NVD: CVE-2019-6540

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-201903-831

TYPE

encryption problem

Trust: 0.6

sources: CNNVD: CNNVD-201903-831

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-003225

PATCH

title:

Top Page

url:

https://www.medtronic.com/us-en/index.html

Trust: 0.8

sources: JVNDB: JVNDB-2019-003225

EXTERNAL IDS

db:	NVD	id:	CVE-2019-6540	Trust: 3.6
db:	ICS CERT	id:	ICSMA-19-080-01	Trust: 3.4
db:	BID	id:	107544	Trust: 2.6
db:	CNNVD	id:	CNNVD-201903-831	Trust: 0.9
db:	CNVD	id:	CNVD-2019-09066	Trust: 0.8
db:	JVNDB	id:	JVNDB-2019-003225	Trust: 0.8
db:	AUSCERT	id:	ESB-2019.0950.2	Trust: 0.6
db:	IVD	id:	1E9DAD07-7958-4810-AC1E-1CB019C0C368	Trust: 0.2
db:	VULHUB	id:	VHN-157975	Trust: 0.1

sources: IVD: 1e9dad07-7958-4810-ac1e-1cb019c0c368 // CNVD: CNVD-2019-09066 // VULHUB: VHN-157975 // BID: 107544 // JVNDB: JVNDB-2019-003225 // CNNVD: CNNVD-201903-831 // NVD: CVE-2019-6540

REFERENCES

url:	https://ics-cert.us-cert.gov/advisories/icsma-19-080-01	Trust: 3.4
url:	http://www.securityfocus.com/bid/107544	Trust: 2.3
url:	https://nvd.nist.gov/vuln/detail/cve-2019-6540	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-6540	Trust: 0.8
url:	https://www.auscert.org.au/bulletins/esb-2019.0950.2/	Trust: 0.6
url:	https://us-cert.cisa.gov/ics/advisories/icsma-19-080-01	Trust: 0.6
url:	https://www.us-cert.gov/ics/advisories/icsma-19-080-01	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/77634	Trust: 0.6
url:	http://www.medtronic.com	Trust: 0.3

sources: CNVD: CNVD-2019-09066 // VULHUB: VHN-157975 // BID: 107544 // JVNDB: JVNDB-2019-003225 // CNNVD: CNNVD-201903-831 // NVD: CVE-2019-6540

CREDITS

currently with University of Birmingham; Flavio D. Garcia; Tom Chothia of the University of Birmingham; and Rik Willems of University Hospital Gasthuisberg Leuven reported these vulnerabilities to NCCIC.,Peter Morgan of Clever Security; Dave Singelée and Bart Preneel of KU Leuven; Eduard Marin formerly of KU Leuven, currently with University of Birmingham; Flavio D. Garcia; Tom Chothia of the University of Birmingham; and Rik Willems of University Hospital Gasthuisberg Leuven, currently with University of Birmingham; Flavio D. Garcia; Tom Chothia of the University of Birmingham; and Rik Willems of University Hospita,Peter Morgan of Clever Security; Dave SingelÃ©e and Bart Preneel of KU Leuven; Eduard Marin formerly of KU Leuven

Trust: 0.6

sources: CNNVD: CNNVD-201903-831

SOURCES

db:	IVD	id:	1e9dad07-7958-4810-ac1e-1cb019c0c368
db:	CNVD	id:	CNVD-2019-09066
db:	VULHUB	id:	VHN-157975
db:	BID	id:	107544
db:	JVNDB	id:	JVNDB-2019-003225
db:	CNNVD	id:	CNNVD-201903-831
db:	NVD	id:	CVE-2019-6540

LAST UPDATE DATE

2024-08-14T14:51:16.702000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2019-09066	date:	2019-04-04T00:00:00
db:	VULHUB	id:	VHN-157975	date:	2021-11-03T00:00:00
db:	BID	id:	107544	date:	2019-03-21T00:00:00
db:	JVNDB	id:	JVNDB-2019-003225	date:	2019-05-13T00:00:00
db:	CNNVD	id:	CNNVD-201903-831	date:	2021-11-04T00:00:00
db:	NVD	id:	CVE-2019-6540	date:	2021-11-03T18:57:30.320

SOURCES RELEASE DATE

db:	IVD	id:	1e9dad07-7958-4810-ac1e-1cb019c0c368	date:	2019-04-04T00:00:00
db:	CNVD	id:	CNVD-2019-09066	date:	2019-04-04T00:00:00
db:	VULHUB	id:	VHN-157975	date:	2019-03-26T00:00:00
db:	BID	id:	107544	date:	2019-03-21T00:00:00
db:	JVNDB	id:	JVNDB-2019-003225	date:	2019-05-13T00:00:00
db:	CNNVD	id:	CNNVD-201903-831	date:	2019-03-21T00:00:00
db:	NVD	id:	CVE-2019-6540	date:	2019-03-26T18:29:01.060