{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T09:01:32.051","vulnerabilities":[{"cve":{"id":"CVE-2019-6538","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2019-03-25T22:29:00.763","lastModified":"2026-06-17T02:39:12.980","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement authentication or authorization. An attacker with adjacent short-range access to an affected product, in situations where the product’s radio is turned on, can inject, replay, modify, and/or intercept data within the telemetry communication. This communication protocol provides the ability to read and write memory values to affected implanted cardiac devices; therefore, an attacker could exploit this communication protocol to change memory in the implanted cardiac device."},{"lang":"es","value":"El protocolo de telemetría Conexus utilizado en las versiones 24950 y 24952 de Medtronic MyCareLink Monitor, CareLink Monitor versión 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D e ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD y CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD y Viva CRT- D no implementa autenticación o autorización. Un atacante con acceso adyacente de corto alcance a un producto afectado, en situaciones donde la radio del producto está encendida, puede inyectar, reproducir, modificar o interceptar datos dentro de la comunicación de telemetría. Este protocolo de comunicación proporciona la capacidad de leer y escribir valores de memoria en dispositivos cardíacos implantados afectados; por lo tanto, un atacante podría explotar este protocolo de comunicación para cambiar la memoria en el dispositivo cardíaco implantado."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"Medtronic","product":"Conexus Radio Frequency Telemetry Protocol","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"MyCareLink Monitor","defaultStatus":"unaffected","versions":[{"version":"24950","status":"affected"},{"version":"24952","status":"affected"}]},{"vendor":"Medtronic","product":"CareLink Monitor","defaultStatus":"unaffected","versions":[{"version":"2490C","status":"affected"}]},{"vendor":"Medtronic","product":"CareLink 2090 Programmer","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Amplia CRT-D","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Claria CRT-D","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Compia CRT-D","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Concerto CRT-D","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Concerto II CRT-D","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Consulta CRT-D","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Evera ICD","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Maximo II CRT-D","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Maximo II ICD","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Mirro ICD","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Nayamed ND ICD","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Primo ICD","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Protecta ICD, Protecta CRT-D","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Secura ICD","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Virtuoso ICD","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Virtuoso II ICD","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Visia AF ICD","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Viva CRT-D","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Brava CRT-D","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Medtronic","product":"Mirro MRI ICD","defaultStatus":"unaffected","versions":[{"version":"All versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.8},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:P/A:N","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-306"},{"lang":"en","value":"CWE-862"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:mycarelink_monitor_firmware:24950:*:*:*:*:*:*:*","matchCriteriaId":"1683D2B0-A4AA-4035-8E30-4641F399BF77"},{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:mycarelink_monitor_firmware:24952:*:*:*:*:*:*:*","matchCriteriaId":"E9F02305-2B0B-4F12-99FD-986ADB46B845"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:mycarelink_monitor:-:*:*:*:*:*:*:*","matchCriteriaId":"F8588B5D-10B2-4AD3-B550-2AD7C252BAB4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:carelink_monitor_firmware:2490c:*:*:*:*:*:*:*","matchCriteriaId":"9822CAEC-D72E-4B49-98A0-734E35D25C3B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:carelink_monitor:-:*:*:*:*:*:*:*","matchCriteriaId":"80CF9694-488A-4829-98B2-1C40136C416E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:carelink_2090_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"8FE6438F-F84A-4876-B13E-4C06050EF7D4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:carelink_2090:-:*:*:*:*:*:*:*","matchCriteriaId":"CA96FB28-A2B2-4144-87F2-19D0EEB3CBB2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:amplia_crt-d_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"53F40F63-1FFD-4F1D-BB91-A0109CCE62A3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:amplia_crt-d:-:*:*:*:*:*:*:*","matchCriteriaId":"E64609AE-EA44-423A-B0E1-5FBF219165C9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:claria_crt-d_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A9F3C231-C8D2-40A1-BA0D-8381208AD3B5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:claria_crt-d:-:*:*:*:*:*:*:*","matchCriteriaId":"756E8B59-2D00-4647-8DCE-A293626FFFDD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:compia_crt-d_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"832EC0E7-9AD0-42E9-9663-F9033763ADF1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:compia_crt-d:-:*:*:*:*:*:*:*","matchCriteriaId":"41A7F4D2-233C-4BF7-9054-C814CE5110DF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:concerto_crt-d_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"008FD034-1206-41DA-9537-1F4244236286"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:concerto_crt-d:-:*:*:*:*:*:*:*","matchCriteriaId":"94A17D5C-5BC8-4066-8C2C-7AB6CA25B4F0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:concerto_ii_crt-d_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7FA48969-0F33-434D-B210-B18D0459316C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:concerto_ii_crt-d:-:*:*:*:*:*:*:*","matchCriteriaId":"77FD6FAE-32FD-48DD-8A95-881C9373F9EE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:consulta_crt-d_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D02CD1C6-9229-408A-8E6E-CAB394DC489A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:consulta_crt-d:-:*:*:*:*:*:*:*","matchCriteriaId":"F6347AAA-ACB2-4CDF-B3F5-49CA8BB17577"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:evera_icd_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"64C40F66-1FA6-4DC6-BA87-4D7811650F81"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:evera_icd:-:*:*:*:*:*:*:*","matchCriteriaId":"DEBB88DD-94C3-478D-8AFE-BC63BA73E94C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:maximo_ii_crt-d_and_lcd_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"283D42FD-D107-4340-85F3-B85F66CA9AA4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:maximo_ii_crt-d_and_lcd:-:*:*:*:*:*:*:*","matchCriteriaId":"468E068D-8598-4D42-A483-7D1040665C4C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:mirro_icd_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FBAA5C99-D5AA-4377-86A0-48862582F769"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:mirro_icd:-:*:*:*:*:*:*:*","matchCriteriaId":"1525A59B-E8F7-43FD-8ECD-5546C4E268F6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:nayamed_nd_icd_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F92F9AA6-56B1-4969-AADD-0D181F1F26F5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:nayamed_nd_icd:-:*:*:*:*:*:*:*","matchCriteriaId":"F6BA1499-CB4E-4067-984E-048CADDB5473"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:primo_icd_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"374D02EF-E15A-4C1A-BB1B-770F3FB75EC7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:primo_icd:-:*:*:*:*:*:*:*","matchCriteriaId":"1941334A-A540-4ED3-8DCF-9298DC18D67E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:protecta_icd_and_crt-d_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"CE78A2F7-1A2F-488C-A129-41F6D0A7C648"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:protecta_icd_and_crt-d:-:*:*:*:*:*:*:*","matchCriteriaId":"A12FFDDC-10A2-4C96-9256-D168C1E3EB5E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:secura_icd_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"348706DF-2F3D-4875-9450-218A2A4E9210"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:secura_icd:-:*:*:*:*:*:*:*","matchCriteriaId":"A82FFC9C-960C-4709-AB17-0D6C7BC0E39E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:virtuoso_icd_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"85BD02A6-B421-4E90-A91E-D966F3CE70A8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:virtuoso_icd:-:*:*:*:*:*:*:*","matchCriteriaId":"618D26D4-6690-4F17-B9F5-2CD05486EB65"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:virtuoso_ii_icd_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F9B06688-4AF7-4354-A6AF-B335424F1D51"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:virtuoso_ii_icd:-:*:*:*:*:*:*:*","matchCriteriaId":"C2F9A58D-D3E8-4E57-93D9-A1FB1BEB65D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:visia_af_icd_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"5D21AD86-5D91-4279-8A54-9A6E6A1B6960"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:visia_af_icd:-:*:*:*:*:*:*:*","matchCriteriaId":"17418686-EC2F-4FDB-88F8-2B4C60A8B48D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:medtronic:viva_crt-d_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"468772A4-BCD2-4884-A7C0-4CD49DFC6C1E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:medtronic:viva_crt-d:-:*:*:*:*:*:*:*","matchCriteriaId":"7222E296-5DA5-4611-BA1C-85059D7918A0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/107544","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-19-080-01","source":"ics-cert@hq.dhs.gov","tags":["Mitigation","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/107544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-19-080-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Third Party Advisory","US Government Resource"]}]}}]}