Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:biotronik_cardiomessenger_ii-s_t-line,_cardiomessenger_ii-s_gsm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductBiotronik Cardiomessenger Ii S T Line, Cardiomessenger Ii S Gsm (79783f91-a47c-5cd3-95ea-c1b0da4261a7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-18256 vulnerable 2026-06-08 05:13:11.291234 Details available
BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication and decryption of local data in transit.
Published: 2020-06-29T13:56:28.000Z
Updated: 2024-08-05T01:47:14.076Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18254 vulnerable 2026-06-08 05:13:11.290323 Details available
BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number from the implanted cardiac device the CardioMessenger is paired with.
Published: 2020-06-29T13:56:26.000Z
Updated: 2024-08-05T01:47:14.141Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18252 vulnerable 2026-06-08 05:13:11.287858 Details available
BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the CardioMessenger can disclose its credentials used for connecting to the BIOTRONIK Remote Communication infrastructure.
Published: 2020-06-29T13:58:25.000Z
Updated: 2024-08-05T01:47:14.154Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18248 vulnerable 2026-06-08 05:13:11.276385 Details available
BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker can disclose the product’s client credentials for connecting to the BIOTRONIK Remote Communication infrastructure.
Published: 2020-06-29T13:58:22.000Z
Updated: 2024-08-05T01:47:14.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18246 vulnerable 2026-06-08 05:13:11.268664 Details available
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure.
Published: 2020-06-29T13:58:20.000Z
Updated: 2024-08-05T01:47:14.007Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.