medium4.6
CVE-2019-18256
BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format.
Impact
BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication and decryption of local data in transit.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Biotronik | Cardiomessenger Ii-S Gsm Firmware | Version 2.20 |
| Biotronik | Cardiomessenger Ii-S T-Line Firmware | Version 2.20 |