CVE-2017-12712
8.8
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD
Description
The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3 base score: 7.5, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.
Affected (7)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before f0b.0e.7e |
| Running on/with | Platform Versions |
|---|---|
Abbott Accent | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before f0b.0e.7e |
| Running on/with | Platform Versions |
|---|---|
Abbott Anthem | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before f10.08.6c |
| Running on/with | Platform Versions |
|---|---|
Abbott Accent Mri | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before f10.08.6c |
| Running on/with | Platform Versions |
|---|---|
Abbott Accent St | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before f14.07.80 |
| Running on/with | Platform Versions |
|---|---|
Abbott Assurity | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before f14.07.80 |
| Running on/with | Platform Versions |
|---|---|
Abbott Allure | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before f17.01.49 |
| Running on/with | Platform Versions |
|---|---|
Abbott Assurity Mri | All versions |
References (4)
Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Timeline
No history available yet.