Medical Devices
Information Disclosure
Lack of Medical data encryption in Dr.Trust ECG/EKG Pen
Lack of Medical data encryption in Dr.Trust ECG/EKG Pen.
.png)
Overview
Lack of Medical data encryption in Dr.Trust ECG/EKG Pen.
An issue was discovered on Dr.Trust ECG/EKG Pen. The onboard Flash memory stores ECG/EKG data in cleartext, without integrity protection against tampering. Attacker can remove the Flash chip and tamper with the ECG data.
Vulnerability details
Lack of Medical data encryption in Dr.Trust ECG/EKG Pen. An issue was discovered on Dr.Trust ECG/EKG Pen. The onboard Flash memory stores ECG/EKG data in cleartext, without integrity protection against tampering.
Disclosure timeline
2020-06-22 reported to the vendor
2020-07-22 No response from the vendor and Public disclosure.
References
2026-06-17 (NVD record)
Credits
Arun Magesh
Related Advisories
jscript.dll - ActiveXObject BSTR - Use After Free
Adobe Reader Out-Of-Bounds Read Information Disclosure Vulnerability
Opera Mini Location Permission Spoof
Concerned about a similar issue in your product?
Payatu's researchers find these vulnerabilities before attackers do. Talk to us about product, firmware and IoT security testing.
