CVE-2019-18252

Опубликовано: 29 июн. 2020

Источник: nvd

CVSS3: 4.3

CVSS2: 3.3

EPSS Низкий

Описание

BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the CardioMessenger can disclose its credentials used for connecting to the BIOTRONIK Remote Communication infrastructure.

Ссылки

https://www.us-cert.gov/ics/advisories/icsma-20-170-05
Third Party Advisory
US Government Resource
https://www.us-cert.gov/ics/advisories/icsma-20-170-05
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:biotronik:cardiomessenger_ii-s_gsm_firmware:2.20:*:*:*:*:*:*:*

cpe:2.3:h:biotronik:cardiomessenger_ii-s_gsm:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:biotronik:cardiomessenger_ii-s_t-line_firmware:2.20:*:*:*:*:*:*:*

cpe:2.3:h:biotronik:cardiomessenger_ii-s_t-line:-:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00464

Низкий

4.3 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-2f8f-gw52-m98c

github

около 4 лет назад