VULNERABILITY INTELLIGENCE

CVE-2019-18254

CVSS score4.6 MEDIUM

EPSS probability0.22%

CISA KEVNot currently listed

Published2020-06-29

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number from the implanted cardiac device the CardioMessenger is paired with.

Weakness classification

ics-cert@hq.dhs.gov: CWE-311
nvd@nist.gov: CWE-312

Primary references

ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource