Skip to content
OpenAdvisories
Unscored CVE-2019-18256 EUVD-2019-8054GHSA-qhvv-89m3-h89m

BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attac…

Published Jun 29, 2020 · Updated Aug 5, 2024 · Assigned by icscert

Description

BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication and decryption of local data in transit.

Affected products

VendorProductAffectedFixed
— BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM CardioMessenger II-S T-Line T4APP 2.20, CardioMessenger II-S GSM T4APP 2.20 —

Advisories 1

References