CVE-2019-18252

EPSS 0.5%CWE-287

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

29 jun 2020Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the CardioMessenger can disclose its credentials used for connecting to the BIOTRONIK Remote Communication infrastructure.

Productos afectados

n/a · BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM

Referencias

https://www.us-cert.gov/ics/advisories/icsma-20-170-05