CVE-2019-18246 - BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure · CoreCVE

Back Back to CVE browser

MEDIUM

BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure

Published Jun 29, 2020

4.3

MEDIUM

CVSS 3.1

EPSS 0.48%

Description

BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure.

Affected products

Vendor n/a Product BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM Default
n/a
- Version
  CardioMessenger II-S T-Line T4APP 2.20, CardioMessenger II-S GSM T4APP 2.20
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM

n/a

Version	Status	Constraints
CardioMessenger II-S T-Line T4APP 2.20, CardioMessenger II-S GSM T4APP 2.20	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (1)

https://www.us-cert.gov/ics/advisories/icsma-20-170-05
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://www.us-cert.gov/ics/advisories/icsma-20-170-05		x_refsource_MISCThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Jun 29, 2020

Updated Aug 5, 2024

Reserved Oct 22, 2019

Link CVE-2019-18246

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2019-18246

Severity n/a

Public date n/a

Links CVE-2019-18246