Non notée
CVE-2019-18256 BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a…
Description
BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication and decryption of local data in transit.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM | Versions non publiées |
Autres CVE de BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM
Les 5 CVE de BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM →
CVE-2019-18252
BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes
Non notée
CVE-2019-18248
BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an…
Non notée
CVE-2019-18246
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK…
Non notée
CVE-2019-18254
BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest
Non notée