CVE-2019-18252: Biotronik Cardiomessenger Ii-S Gsm Firmware

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the CardioMessenger can disclose its credentials used for connecting to the BIOTRONIK Remote Communication infrastructure.

Affected products

• Biotronik Cardiomessenger Ii-S Gsm Firmware: version 2.20 only
• Biotronik Cardiomessenger Ii-S T-Line Firmware: version 2.20 only

Published 2020-06-29. Last modified 2026-06-17.