Abbott

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-47262 1Abbott 1Id Now Firmware Jun 17, 2026 Nov 14, 2023 N/A· v4 5.2 MEDIUM· v3 N/A· v2 The startup process and device configurations of the Abbott ID NOW device, before v7.1, can be interrupted and/or modified via physical access to an internal serial port. Direct physical access is required to exploit.
CVE-2020-8997 1Abbott 1Freestyle Libre Firmware Jun 17, 2026 Feb 16, 2020 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write access to memory via a specific NFC unlock command. NOTE: The vulnerability is not present in the FreeStyle Li...Show more Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write access to memory via a specific NFC unlock command. NOTE: The vulnerability is not present in the FreeStyle Libre 14-day in the U.S (announced in August 2018) and FreeStyle Libre 2 outside the U.S (announced in October 2018).Show less
CVE-2017-12716 1Abbott 4Accent Firmware Accent Mri FirmwareAccent St Firmware+1 more Nov 21, 2024 Apr 25, 2018 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and An...Show more Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and Anthem pacemakers store the optional patient information without encryption. CVSS v3 base score: 3.1, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.Show less
CVE-2017-12714 1Abbott 7Accent Firmware Accent Mri FirmwareAccent St Firmware+4 more Nov 21, 2024 Apr 25, 2018 N/A· v4 6.5 MEDIUM· v3 6.1 MEDIUM· v2 Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly sen...Show more Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life. CVSS v3 base score: 5.3, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.Show less
CVE-2017-12712 1Abbott 7Accent Firmware Accent Mri FirmwareAccent St Firmware+4 more Nov 21, 2024 Apr 25, 2018 N/A· v4 8.8 HIGH· v3 8.3 HIGH· v2 The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to...Show more The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3 base score: 7.5, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.Show less
CVE-2017-5149 1Abbott 1Merlin@home Firmware May 13, 2026 Feb 13, 2017 N/A· v4 8.9 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in St. Jude Medical Merlin@home, versions prior to Version 8.2.2 (RF models: EX1150; Inductive models: EX1100; and Inductive models: EX1100 with MerlinOnDemand capability). The identities of the e...Show more An issue was discovered in St. Jude Medical Merlin@home, versions prior to Version 8.2.2 (RF models: EX1150; Inductive models: EX1100; and Inductive models: EX1100 with MerlinOnDemand capability). The identities of the endpoints for the communication channel between the transmitter and St. Jude Medical's web site, Merlin.net, are not verified. This may allow a man-in-the-middle attacker to access or influence communications between the identified endpoints.Show less