Skip to content
OpenAdvisories
Unscored CVE-2019-18254 EUVD-2019-8052GHSA-mpj6-2m9m-7rv8

BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to…

Published Jun 29, 2020 · Updated Aug 5, 2024 · Assigned by icscert

Description

BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number from the implanted cardiac device the CardioMessenger is paired with.

Affected products

VendorProductAffectedFixed
— BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM CardioMessenger II-S T-Line T4APP 2.20, CardioMessenger II-S GSM T4APP 2.20 —

Advisories 1

References