ByteOS Network

NVD Vulnerability Details :

CVE-2019-18246

Analyzed

Source-ics-cert@hq.dhs.gov

Published At-29 Jun, 2020 | 14:15

Updated At-06 Apr, 2021 | 17:16

BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	4.3	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary	2.0	3.3	LOW	AV:A/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

biotronik>>cardiomessenger_ii-s_gsm_firmware>>2.20

cpe:2.3:o:biotronik:cardiomessenger_ii-s_gsm_firmware:2.20:*:*:*:*:*:*:*

biotronik>>cardiomessenger_ii-s_gsm>>-

cpe:2.3:h:biotronik:cardiomessenger_ii-s_gsm:-:*:*:*:*:*:*:*

biotronik>>cardiomessenger_ii-s_t-line_firmware>>2.20

cpe:2.3:o:biotronik:cardiomessenger_ii-s_t-line_firmware:2.20:*:*:*:*:*:*:*

biotronik>>cardiomessenger_ii-s_t-line>>-

cpe:2.3:h:biotronik:cardiomessenger_ii-s_t-line:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-287	Primary	nvd@nist.gov
CWE-287	Secondary	ics-cert@hq.dhs.gov

References

Hyperlink	Source	Resource
https://www.us-cert.gov/ics/advisories/icsma-20-170-05	ics-cert@hq.dhs.gov	Third Party Advisory US Government Resource

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History