Lucene search

[email protected]CVE-2019-18248

HistoryJun 29, 2020 - 2:15 p.m.

CVE-2019-18248

2020-06-2914:15:10

CWE-319

[email protected]

web.nvd.nist.gov

biotronik

cardiomessenger ii

credentials

clear-text

security risk

nvd

4.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.7 Medium

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

23.4%

JSON

BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker can disclose the product’s client credentials for connecting to the BIOTRONIK Remote Communication infrastructure.

Affected configurations

NVD

Node

biotronikcardiomessenger_ii-s_gsm_firmwareMatch2.20

AND

biotronikcardiomessenger_ii-s_gsmMatch-

Node

biotronikcardiomessenger_ii-s_t-line_firmwareMatch2.20

AND

biotronikcardiomessenger_ii-s_t-lineMatch-

CPENameOperatorVersion
biotronik:cardiomessenger_ii-s_gsm_firmwarebiotronik cardiomessenger ii-s gsm firmwareeq2.20

CPE	Name	Operator	Version
biotronik:cardiomessenger_ii-s_gsm_firmware	biotronik cardiomessenger ii-s gsm firmware	eq	2.20

CNA Affected

[
  {
    "product": "BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "CardioMessenger II-S T-Line T4APP 2.20, CardioMessenger II-S GSM T4APP 2.20"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsma-20-170-05

4.3 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.7 Medium

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

23.4%

JSON

Related for CVE-2019-18248

nvd1 prion1 cvelist1 ics1