Non notée
CVE-2019-18254 BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest
Description
BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number from the implanted cardiac device the CardioMessenger is paired with.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM | Versions non publiées |
Autres CVE de BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM
Les 5 CVE de BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM →
CVE-2019-18252
BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes
Non notée
CVE-2019-18248
BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an…
Non notée
CVE-2019-18246
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK…
Non notée
CVE-2019-18256
BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a…
Non notée