2 Updates Published – 1-30-20

Today the CISA NCCIC-ICS published two updates for previously published medical device security advisories from Medtronic.

CareLink Update

This device provides additional information on an advisory that was originally published on February 27^th, 2018 and most recently updated on October 11^th, 2018. The new information includes announcing:

• The availability of a patch to mitigate the vulnerabilities; and

• Medtronic has re-enabled the network-based software update mechanism.

Conexus Update

This device provides additional information on an advisory that was originally published on March 21^st, 2019. The new information includes adding two new affected products:

• Brava CRT-D (all models); and

• Mirro MRI ICS (all models)

NOTE: NCCIC-ICS sent out two emails today announcing these updates as they usually do. Unfortunately, the email about the Conexus update included an email header describing an update to last week’s GE CARESCAPE advisory. The details in the body of the email were correct; just a little bit confusing…. Fortunately, no confusion in the @ICS-CERT TWEETS®.