CVE-2018-18978

An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15

published May 6, 2019

CVSS
—
EPSS
1%
Percentile
53.9
In the wild
Unconfirmed
What it is

An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically coded encryption key. Extraction of the encryption key is necessary for deciphering communications between this application and the backend server. This, in combination with retrieving any user's encrypted data from the Ascensia cloud through another vulnerability, allows an attacker to obtain and modify any patient's medical information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00734 · 53.9th percentile
Published
2019-05-06T19:18Z
EPSS history
Timeline
  • 06 MAY 19:18Z
    An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15
    cvelistv5