medium4.3
CVE-2019-18248
BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel.
Impact
BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker can disclose the product’s client credentials for connecting to the BIOTRONIK Remote Communication infrastructure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Biotronik | Cardiomessenger Ii-S Gsm Firmware | Version 2.20 |
| Biotronik | Cardiomessenger Ii-S T-Line Firmware | Version 2.20 |