VULNERABILITY INTELLIGENCE

CVE-2019-18252

CVSS score4.3 MEDIUM
EPSS probability0.48%
CISA KEVNot currently listed
Published2020-06-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the CardioMessenger can disclose its credentials used for connecting to the BIOTRONIK Remote Communication infrastructure.

Weakness classification

  • CWE-287: Improper Authentication

Primary references