CVE-2019-18248 in CardioMessenger II

Résumé

par MITRE

BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker can disclose the product’s client credentials for connecting to the BIOTRONIK Remote Communication infrastructure.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Réserver: 22/10/2019
• Modérer: accepté
• Entrée: VDB-157404
• CPE: prêt
• CWE: CWE-319 (confirmé)
• CVSS: 8.8 (NVD)
• EPSS: 0.00351
• KEV: non
• Activités: très faible
• Secteur: Lawfirm, Telecommunication, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-18248
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-18248
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-18248/