CVE-2018-18979

An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15

published May 6, 2019

CVSS
—
EPSS
1%
Percentile
67.1
In the wild
Unconfirmed
What it is

An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically coded initialization vector. Extraction of the initialization vector is necessary for deciphering communications between this application and the backend server. This, in combination with retrieving any user's encrypted data from the Ascensia cloud through another vulnerability, allows an attacker to obtain and modify any patient's medical information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01174 · 67.1th percentile
Published
2019-05-06T19:19Z
EPSS history
Timeline
  • 06 MAY 19:19Z
    An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15
    cvelistv5