Not rated
CVE-2019-18252 BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes
Description
BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the CardioMessenger can disclose its credentials used for connecting to the BIOTRONIK Remote Communication infrastructure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM | Versions not published |
Other CVEs of BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM
The 5 CVEs of BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM →
CVE-2019-18248
BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an…
Not rated
CVE-2019-18246
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK…
Not rated
CVE-2019-18256
BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a…
Not rated
CVE-2019-18254
BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest
Not rated