Not rated
CVE-2019-18254 BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest
Description
BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number from the implanted cardiac device the CardioMessenger is paired with.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM | Versions not published |
Other CVEs of BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM
The 5 CVEs of BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM →
CVE-2019-18252
BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes
Not rated
CVE-2019-18248
BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an…
Not rated
CVE-2019-18246
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK…
Not rated
CVE-2019-18256
BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a…
Not rated