Not rated
CVE-2019-18256 BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a…
Description
BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication and decryption of local data in transit.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM | Versions not published |
Other CVEs of BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM
The 5 CVEs of BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM →
CVE-2019-18252
BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes
Not rated
CVE-2019-18248
BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an…
Not rated
CVE-2019-18246
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK…
Not rated
CVE-2019-18254
BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest
Not rated