CVE-2018-14781: Medtronicdiabetes 508 Minimed Insulin Pump Firmware

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Medtronic MiniMed MMT devices when paired with a remote controller and having the “easy bolus” and “remote bolus” options enabled (non-default), are vulnerable to a capture-replay attack. An attacker can capture the wireless transmissions between the remote controller and the pump and replay them to cause an insulin (bolus) delivery.

Affected products

• Medtronicdiabetes 508 Minimed Insulin Pump Firmware: affected versions not specified
• Medtronicdiabetes 522 Paradigm Real-Time Firmware: affected versions not specified
• Medtronicdiabetes 523 Paradigm Revel Firmware: affected versions not specified
• Medtronicdiabetes 523k Paradigm Revel Firmware: affected versions not specified
• Medtronicdiabetes 551 Minimed 530g Firmware: affected versions not specified
• Medtronicdiabetes 722 Paradigm Real-Time Firmware: affected versions not specified
• Medtronicdiabetes 723 Paradigm Revel Firmware: affected versions not specified
• Medtronicdiabetes 723k Paradigm Revel Firmware: affected versions not specified
• Medtronicdiabetes 751 Minimed 530g Firmware: affected versions not specified

Published 2018-08-13. Last modified 2026-06-17.