CVE-2019-18252

MEDIUM

BIOTRONIK CardioMessenger II - Improper Authentication via Credential Reuse

Title source: llm
STIX 2.1

Description

BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the CardioMessenger can disclose its credentials used for connecting to the BIOTRONIK Remote Communication infrastructure.

References (1)

Core 1
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://www.us-cert.gov/ics/advisories/icsma-20-170-05

Scores

CVSS v3 4.3
EPSS 0.0046
EPSS Percentile 36.8%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-287
Status published
Products (2)
biotronik/cardiomessenger_ii-s_gsm_firmware 2.20
biotronik/cardiomessenger_ii-s_t-line_firmware 2.20
Published Jun 29, 2020
Tracked Since Feb 18, 2026