PatchTheCVECVE-2020-15486: An issue was discovered on Dr Trust ECG Pen 2.00.08 devices
CVE-2020-15486 is a medium-severity flaw (CVSS 6.5) affecting electrocardiogram pen firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairing or security, any attacker can access the GATT server of the device and can sniff the data being broadcasted while a measurement is being done. Also, saved data can also be extracted over a Bluetooth connection. In addition, an attacker can launch a man-in-the-middle attack against data integrity.
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 6.5 (Medium) |
| Attack vector | Adjacent network |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.5% (top 57%) |
| CISA exploited list | No |
| Published | 2020-08-26 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2020-15486?
electrocardiogram pen firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2020-15486 being exploited?
CVE-2020-15486 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2020-15486 affect?
CVE-2020-15486 affects electrocardiogram pen firmware. Severity is medium (CVSS 6.5). An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairing or security, any attacker can access the GATT server of the device and can sniff the data being b
How urgent is CVE-2020-15486?
Priority 34/100. No elevated risk signals yet.