Authentication flaw

2020-06-2914:15:00

PRIOn knowledge base

www.prio-n.com

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.7%

JSON

BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication and decryption of local data in transit.

CPENameOperatorVersion
cardiomessenger_ii-s_gsm_firmwareeq2.20
cardiomessenger_ii-s_t-line_firmwareeq2.20

CPE	Name	Operator	Version
	cardiomessenger_ii-s_gsm_firmware	eq	2.20
	cardiomessenger_ii-s_t-line_firmware	eq	2.20

References

www.us-cert.gov/ics/advisories/icsma-20-170-05