biotronik records
5 published records for vendor biotronik.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-287 Improper Authentication2
- CWE-257 Storing Passwords in a Recoverable Format1
- CWE-311 Missing Encryption of Sensitive Data1
- CWE-319 Cleartext Transmission of Sensitive Information1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
18Monitor | CVE-2019-18256No exploit | BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format.biotronik · cardiomessenger ii-s gsm firmware · CWE-257 | Medium4.6 | — | 0.3% | Jun 29, 2020 |
18Monitor | CVE-2019-18254No exploit | BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest.biotronik · cardiomessenger ii-s gsm firmware · CWE-311 | Medium4.6 | — | 0.2% | Jun 29, 2020 |
17Monitor | CVE-2019-18246No exploit | BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication inbiotronik · cardiomessenger ii-s gsm firmware · CWE-287 | Medium4.3 | — | 0.4% | Jun 29, 2020 |
17Monitor | CVE-2019-18252No exploit | BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes.biotronik · cardiomessenger ii-s gsm firmware · CWE-287 | Medium4.3 | — | 0.4% | Jun 29, 2020 |
17Monitor | CVE-2019-18248No exploit | BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication chanbiotronik · cardiomessenger ii-s gsm firmware · CWE-319 | Medium4.3 | — | 0.3% | Jun 29, 2020 |
- CVE-2019-1825618Monitor
BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format.
MediumCVSS 4.6No exploitEPSS 0%biotronik · cardiomessenger ii-s gsm firmwareJun 29, 2020
- CVE-2019-1825418Monitor
BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest.
MediumCVSS 4.6No exploitEPSS 0%biotronik · cardiomessenger ii-s gsm firmwareJun 29, 2020
- CVE-2019-1824617Monitor
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication in
MediumCVSS 4.3No exploitEPSS 0%biotronik · cardiomessenger ii-s gsm firmwareJun 29, 2020
- CVE-2019-1825217Monitor
BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes.
MediumCVSS 4.3No exploitEPSS 0%biotronik · cardiomessenger ii-s gsm firmwareJun 29, 2020
- CVE-2019-1824817Monitor
BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication chan
MediumCVSS 4.3No exploitEPSS 0%biotronik · cardiomessenger ii-s gsm firmwareJun 29, 2020