Biotronik Cardiomessenger Ii-s Gsm Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Biotronik Cardiomessenger Ii-s Gsm Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2019-18254 — CVSS 4.6 (medium): BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to…
• CVE-2019-18256 — CVSS 4.6 (medium): BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An…
• CVE-2019-18246 — CVSS 4.3 (medium): BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication…
• CVE-2019-18248 — CVSS 4.3 (medium): BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication…
• CVE-2019-18252 — CVSS 4.3 (medium): BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent…