Peter Morgan

The Conexus telemetry protocol used in the affected devices does not implement encryption. This allows an attacker with adjacent short-range access to listen to communications, including the transmission of sensitive data.

The Conexus telemetry protocol used in the affected products does not implement authentication or authorization. An attacker with adjacent short-range access to an affected product can inject, replay, modify, and/or intercept data within the telemetry communication when the product's radio is turned on. This allows an attacker to read and write memory values to affected implanted cardiac devices, potentially changing memory in the implanted cardiac device.

The issue concerns a hard-coded operating system password in the affected devices. An attacker who gains physical access to the device can exploit this by removing the case, connecting to the debug port, and using the password to gain privileged access to the operating system.