{"id":"CVE-2019-18252","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-18252","generatedAt":"2026-10-27T23:38:47.103Z","title":"BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes.","description":"BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the CardioMessenger can disclose its credentials used for connecting to the BIOTRONIK Remote Communication infrastructure.","published":"2020-06-29T14:15:10.000Z","lastModified":"2026-06-17T02:24:42.000Z","status":"Modified","sourceIdentifier":"ics-cert@hq.dhs.gov","cvss":{"version":"3.1","score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},"cwe":["CWE-287"],"affected":["biotronik/cardiomessenger ii-s gsm firmware","biotronik/cardiomessenger ii-s t-line firmware"],"epss":{"score":0.00484,"percentile":0.41455,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.48%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.us-cert.gov/ics/advisories/icsma-20-170-05","tags":["Third Party Advisory","US Government Resource"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://www.us-cert.gov/ics/advisories/icsma-20-170-05","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-18252","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}