CVE:CVE-2018-14781
CNNVD:CNNVD-201808-307
Medtronic MMT-508 MiniMed insulin pump等都是美国Medtronic公司的不同型号的胰岛素泵。
多款Medtronic产品中存在授权问题漏洞。在配对远程控制器并启用‘easy bolus’和‘remote bolus’选项时，攻击者可利用该漏洞捕获控制器和pump之间传递的信息并进行胰岛素注射。以下产品受到影响：Medtronic MMT - 508 MiniMed insulin pump；MMT - 522 Paradigm REAL-TIME；MMT - 722 Paradigm REAL-TIME；MMT - 523 Paradigm Revel；MMT - 723 Paradigm Revel；MMT - 523K Paradigm Revel；MMT - 723K Paradigm Revel；MMT - 551 MiniMed 530G；MMT - 751 MiniMed 530G。
solution:Upgrade medtronicdiabetes 508_minimed_insulin_pump_firmware to a higher version than -; Upgrade medtronicdiabetes 522_paradigm_real-time_firmware to a higher version than -; Upgrade medtronicdiabetes 722_paradigm_real-time_firmware to a higher version than -; Upgrade medtronicdiabetes 523_paradigm_revel_firmware to a higher version than -; Upgrade medtronicdiabetes 723_paradigm_revel_firmware to a higher version than -; Upgrade medtronicdiabetes 523k_paradigm_revel_firmware to a higher version than -; Upgrade medtronicdiabetes 723k_paradigm_revel_firmware to a higher version than -; Upgrade medtronicdiabetes 551_minimed_530g_firmware to a higher version than -; Upgrade medtronicdiabetes 751_minimed_530g_firmware to a higher version than -