CVE-2019-18252

BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the CardioMessenger can disclose its credentials used for connecting to the BIOTRONIK Remote Communication infrastructure.

Score

CVSS 3.1 4.3 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2020-06-29

Last modified

2024-08-05

Weaknesses

CWE-287

Affected products

• Cardiomessenger Ii-s Gsm Firmware (Biotronik)
• Cardiomessenger Ii-s T-line Firmware (Biotronik)

References

• https://www.us-cert.gov/ics/advisories/icsma-20-170-05