Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Biotronik

First CVE: Jun 29, 2020Active for: 6 yearsTotal CVEs: 5

Biotronik manufactures cardiac implantable medical devices and associated remote monitoring platforms, with its disclosed vulnerabilities concentrating in the CardiomMessenger II remote-monitoring system across its GSM and T-Line variants. The recurring weakness classes—improper authentication, cleartext storage and transmission of sensitive information, and insufficiently protected credentials—reflect the authentication and data-protection demands of connected medical devices that handle patient health records and device-control communications. Current severity, exploitation, and exposure details are shown alongside this summary.

FAUCET AI Generated
5
Total CVEs
More Total CVEs than 83% of tracked vendors
1.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 74% of tracked vendors
4.4
Avg CVSS Score
Higher Avg CVSS Score than 7% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Biotronik over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 29, 2020
6 years ago
Most Recent CVE
Jun 29, 2020
2,216 days ago

Products(4 total)

Top CVEs

Signals from CVEs in this vendor scope (5 CVEs).

5 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2019-18256MEDIUM
BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMes
Jun 29, 20204.619NONO
CVE-2019-18254MEDIUM
BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical
Jun 29, 20204.619NONO
CVE-2019-18252MEDIUM
BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the CardioMessenger can disclos
Jun 29, 20204.318NONO
CVE-2019-18248MEDIUM
BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker can disclose the produc
Jun 29, 20204.318NONO
CVE-2019-18246MEDIUM
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure.
Jun 29, 20204.318NONO
View all 5 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products5 CVEs
100%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
Medium
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical2 (40.0%)
Adjacent Network3 (60.0%)
Attack Complexity
Low5 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None5 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None5 (100.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (5 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Biotronik.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Biotronik — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Biotronik's Products

View all 1 CNAs →

Top CWEs