Design/Logic Flaw

2020-06-2914:15:00

PRIOn knowledge base

www.prio-n.com

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.5%

JSON

BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker can disclose the product’s client credentials for connecting to the BIOTRONIK Remote Communication infrastructure.

CPENameOperatorVersion
cardiomessenger_ii-s_gsm_firmwareeq2.20
cardiomessenger_ii-s_t-line_firmwareeq2.20

CPE	Name	Operator	Version
	cardiomessenger_ii-s_gsm_firmware	eq	2.20
	cardiomessenger_ii-s_t-line_firmware	eq	2.20

References

www.us-cert.gov/ics/advisories/icsma-20-170-05