The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement encryption. An attacker with adjacent short-range access to a target product can listen to communications, including the transmission of sensitive data.
Metrics
Affected Vendors & Products
References
History
Thu, 22 May 2025 19:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Title | Medtronic Conexus Radio Frequency Telemetry Protocol Cleartext Transmission of Sensitive Information |

Status: PUBLISHED
Assigner: icscert
Published:
Updated: 2025-05-22T19:23:42.770Z
Reserved: 2019-01-22T00:00:00
Link: CVE-2019-6540

No data.

Status : Modified
Published: 2019-03-26T18:29:01.060
Modified: 2025-05-22T20:15:21.027
Link: CVE-2019-6540

No data.

No data.