CVEvulnerability

CVE-2017-12712

8.8 HIGH Published 2018-04-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-04-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
8.3 HIGH — AV:A/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287

Description

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3 base score: 7.5, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.

Affected configurations

• abbott accent firmware (< f0b.0e.7e) • abbott anthem firmware (< f0b.0e.7e) • abbott accent mri firmware (< f10.08.6c) • abbott accent st firmware (< f10.08.6c) • abbott assurity firmware (< f14.07.80) • abbott allure firmware (< f14.07.80) • abbott assurity mri firmware (< f17.01.49)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References