What is the CVSS score of CVE-2018-10634?

CVE-2018-10634 has a CVSS 3.1 base score of 4.8 (Medium). CVSS vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.5%.

Minimed Paradigm Revel Mmt 523K Firmware CVE-2018-10634

MEDIUM

Cleartext Transmission of Sensitive Information (CWE-319)

2018-08-13 ics-cert@hq.dhs.gov

Information Disclosure Minimed Paradigm Revel Mmt 523K Firmware Minimed Paradigm Revel Mmt 723K Firmware Minimed Paradigm Revel Mmt 723 Firmware Minimed 530G Mmt 551 Firmware Minimed Paradigm Real Time Mmt 522 Firmware Minimed Paradigm Real Time Mmt 722 Firmware Minimed 530G Mmt 751 Firmware Minimed Paradigm Revel Mmt 523 Firmware Minimed Paradigm 508 Insulin Pump Firmware

4.8

CVSS 3.1 · Vendor: hq

Severity by source

Vendor (hq) PRIMARY

4.8 MEDIUM

AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Primary rating from Vendor (hq) · only source for this CVE.

CVSS VectorVendor: hq

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Aug 13, 2018 - 21:47 cve.org

MEDIUM 4.8

DescriptionCVE.org

Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted in cleartext. A sufficiently skilled attacker could capture these transmissions and extract sensitive information, such as device serial numbers.

AnalysisAI

Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted in cleartext. Rated medium severity (CVSS 4.8), this vulnerability is no authentication required. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-319. Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted in cleartext. A sufficiently skilled attacker could capture these transmissions and extract sensitive information, such as device serial numbers. Affected products include: Medtronic Minimed Paradigm Revel Mmt-523K Firmware, Medtronic Minimed Paradigm Revel Mmt-723K Firmware, Medtronic Minimed Paradigm Revel Mmt-723 Firmware, Medtronic Minimed 530G Mmt-551 Firmware, Medtronic Minimed Paradigm Real-Time Mmt-522 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.