CVE-2017-12701

BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerability which may allow an authenticated attacker to crash the CPAP's Wi-Fi module resulting in a denial-of-service condition.

Score

CVSS 3.0 6.5 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-04-17

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Luna Cpap Machine (Bmc Medical)
• Luna Cpap Machine Firmware (Cpap)

References

• http://www.securityfocus.com/bid/100354
• https://ics-cert.us-cert.gov/advisories/ICSMA-17-227-01