CVE-2017-12712
The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3 base score: 7.5, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.
Published:Apr 25, 2018
Last Modified:Nov 21, 2024
EPS:Apr 25, 2018
EPSS Score:0.00737
CVSS Score:8.8
Affected Products
Vendor
Product
Action
Vendor
Abbott
Product
Accent
Abbott
Accent
Vendor
Abbott
Product
Accent Firmware
Abbott
Accent Firmware
Vendor
Abbott
Product
Accent Mri
Abbott
Accent Mri
Vendor
Abbott
Product
Accent Mri Firmware
Abbott
Accent Mri Firmware
Vendor
Abbott
Product
Accent St
Abbott
Accent St
Vendor
Abbott
Product
Accent St Firmware
Abbott
Accent St Firmware
Vendor
Abbott
Product
Allure
Abbott
Allure
Vendor
Abbott
Product
Allure Firmware
Abbott
Allure Firmware
Vendor
Abbott
Product
Anthem
Abbott
Anthem
Vendor
Abbott
Product
Anthem Firmware
Abbott
Anthem Firmware
Vendor
Abbott
Product
Assurity
Abbott
Assurity
Vendor
Abbott
Product
Assurity Firmware
Abbott
Assurity Firmware
Vendor
Abbott
Product
Assurity Mri
Abbott
Assurity Mri
Vendor
Abbott
Product
Assurity Mri Firmware
Abbott
Assurity Mri Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
