Medtronic MiniMed 630G (MMT-1715)

Medtronic MiniMed 630G (MMT-1715)
Security Grade D Calculator v1	Medtronic MiniMed 630G (MMT-1715) Brand: Medtronic Category: Medical device • Model / Gen: MMT-1715 Release Date: 2016-09-01 • Status: In sale Classification Date: 2026-10-25 • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	None	—	Sealed medical device; no documented physical/hardware tampering.
Known vulnerabilities	Rare	—	CVE-2022-32537 — protection-mechanism failure in the pump's wireless pairing protocol. Source: www.cisa.gov/news-events/ics-medical-advisories/icsma-22-263-01
Prior attacks	None	—	No known real-world exploitation (CISA notes none); earlier insulin-pump families were only demonstrated by researchers. Source: www.medtronic.com/en-us/e/product-security/security-bulletins/minimed-600-series-communication-issue.html
Updatability	Rare	—	Firmware is updated through CareLink rather than routinely over-the-air; updates are infrequent. Source: nvd.nist.gov/vuln/detail/CVE-2022-32537
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	—	Pairing with CGM/meter lacks robust mutual authentication (the core of CVE-2022-32537). Source: www.cisa.gov/news-events/ics-medical-advisories/icsma-22-263-01
Communications	Encrypted with obselete encryption	—	Proprietary short-range RF with a flawed/obsolete protection mechanism. Source: www.cisa.gov/news-events/ics-medical-advisories/icsma-22-263-01
Storage	No encryption	—	No encryption of data stored in the device's flash.
Category Score	Score: 3 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Absent	—	No user-facing account system on the device itself.
Authentication	Basic	—	Basic pairing/security-lock mechanism; the pairing handshake is the documented weakness.
Brute-force protection	Absent	—	No lockout or rate-limiting on the pairing process.
Event logging	Partial logging	—	The pump logs delivery events accessible via CareLink, but no security-event logging.
Passwords	Default/Common/Easy to guess	—	No meaningful password policy; security relies on a simple pairing sequence.
Category Score	Score: 3 / 3

Technical Specifications

Property	Details
Operating System & App	(Companion App: )
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity:
Physical (Dimensions & Mass)	Dimensions: • Mass: