CVE-2019-18256CWE-257

BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format

published June 29, 2020

CVSS
—
EPSS
0%
Percentile
28.3
In the wild
Unconfirmed
What it is

BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication and decryption of local data in transit.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00358 · 28.3th percentile
Weakness
CWE-257 · Storing Passwords in a Recoverable Format
Published
2020-06-29T13:56Z
EPSS history
Timeline
  • 29 JUN 13:56Z
    BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format
    cvelistv5