Biotronik Cardiomessenger Ii-S T-Line Firmware
5 CVEs affecting Biotronik Cardiomessenger Ii-S T-Line Firmware. Latest disclosed: 2020-06-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-18256 | Medium | 4.6 | 2020-06-29 | BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical ac… |
CVE-2019-18254 | Medium | 4.6 | 2020-06-29 | BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger… |
CVE-2019-18252 | Medium | 4.3 | 2020-06-29 | BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the Cardio… |
CVE-2019-18248 | Medium | 4.3 | 2020-06-29 | BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker ca… |
CVE-2019-18246 | Medium | 4.3 | 2020-06-29 | BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure. |