CVE-2019-10964

CVE-2019-10964 describes a critical vulnerability in Medtronic MiniMed Insulin Pumps, where the wireless RF communication protocol lacks proper authentication and authorization. This allows an attacker with adjacent access to inject, replay, modify, or intercept data, potentially altering pump settings and controlling insulin delivery. With a CVSS score of 8.8 (HIGH), the vulnerability is easily exploitable via adjacent network access with low attack complexity, leading to high impacts on confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability has garnered some media attention and community discussion.