CVE-2019-18248

4.3 mediumEPSS 0.4%

Medium (4.3) in biotronik. EPSS 0.4% chance of exploitation in the next 30 days.

BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker can disclose the product’s client credentials for connecting to the BIOTRONIK Remote Communication infrastructure.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2020-06-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

biotronik:cardiomessenger_ii-s_gsm_firmware
biotronik:cardiomessenger_ii-s_t-line_firmware

References

https://www.us-cert.gov/ics/advisories/icsma-20-170-05
https://www.us-cert.gov/ics/advisories/icsma-20-170-05

Check your stack JSON