CVE-2019-18256

Summary

BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication and decryption of local data in transit.

Affected Software

VendorProductVersion RangeStatus
n/aBIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSMCardioMessenger II-S T-Line T4APP 2.20, CardioMessenger II-S GSM T4APP 2.20affected

Weaknesses

  • CWE-257: STORING PASSWORDS IN A RECOVERABLE FORMAT CWE-257

ADP Enrichment

CVE Program Container

Additional References

References