CVE-2018-14781
Medtronic MiniMed MMT-500/MMT-503 Remote Controllers Authentication Bypass by Capture-replay
- Published
- Updated
- Reserved
- Assigned by
- icscert
Description
Medtronic MiniMed MMT devices when paired with a remote controller and having the “easy bolus” and “remote bolus” options enabled (non-default), are vulnerable to a capture-replay attack. An attacker can capture the wireless transmissions between the remote controller and the pump and replay them to cause an insulin (bolus) delivery.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 3.1 | Medium5.3 | CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N |
| NVDNVD · Modified | 3.1 | Medium5.3 | CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N |
- EPSS (exploitation in 30 days)
- 0.71% · top 46% of all CVEs (6 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.
Weakness
Affected products
Medtronic · MMT- 508 - MiniMed pump
- affected All versions
Medtronic · MMT – 511 pump Paradigm
- affected All versions
Medtronic · MMT – 512 / MMT – 712 Paradigm x12
- affected All versions
Medtronic · MMT – 515 / MMT – 715 Paradigm x15
- affected All versions
Medtronic · MMT – 522 / MMT – 722 Paradigm REAL-TIME
- affected All versions
Medtronic · MMT – 522(K) / MMT – 722(K) Paradigm REAL-TIME
- affected All versions
Medtronic · MMT – 523 / MMT – 723 Paradigm Revel
- affected All versions
Medtronic · MMT – 523(K) / MMT – 723(K) Paradigm
- affected All versions
Medtronic · MMT – 554 / MMT – 754 MiniMed Veo
- affected All versions
Medtronic · MMT – 551 / MMT – 751 MiniMed 530G
- affected All versions
What to do
Workaround: The remote option is turned off in the pump by default. Medtronic is directing all users to stop using their remote controllers, disable the remote option on their insulin pump, and to return the remote controllers to Medtronic. Medtronic has released additional patient focused information https://www.medtronic.com/security . Additionally, Medtronic will be sending a letter to patients who may still be actively using the remotes in order to inform patients about these security risks, and request patients stop using the remote and return them to Medtronic.
References (3)
- https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed.html (opens in a new tab)
- 105044 (opens in a new tab)x_refsource_MISCx_transferred
- http://www.securityfocus.com/bid/105044 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2018-14781)Record last updated .