Biotronik
Biotronik Cardiomessenger Ii-s GSM Firmware: vulnerabilidades y CVE
Biotronik Cardiomessenger Ii-s GSM Firmware tiene 5 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2019-18256 | Media (4.6) | 0.36% | — | 29 jun 2020 | BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for… |
| CVE-2019-18254 | Media (4.6) | 0.22% | — | 29 jun 2020 | BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number… |
| CVE-2019-18252 | Media (4.3) | 0.48% | — | 29 jun 2020 | BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the CardioMessenger can disclose its credentials used for connecting… |
| CVE-2019-18248 | Media (4.3) | 0.37% | — | 29 jun 2020 | BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker can disclose the product’s client credentials for connecting… |
| CVE-2019-18246 | Media (4.3) | 0.48% | — | 29 jun 2020 | BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure. |