CVE-2017-12714

Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life. CVSS v3 base score: 5.3, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.

Score

CVSS 3.0 6.5 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-04-25

Last modified

2024-09-17

Weaknesses

CWE-920

Affected products

• Accent Firmware (Abbott)
• Accent Mri Firmware (Abbott)
• Accent St Firmware (Abbott)
• Allure Firmware (Abbott)
• Anthem Firmware (Abbott)
• Assurity Firmware (Abbott)
• Assurity Mri Firmware (Abbott)
• Accent Mri (Abbott Laboratories)
• Accentanthem (Abbott Laboratories)
• And Assurity Mri. (Abbott Laboratories)
• Assurityallure (Abbott Laboratories)

References

• http://www.securityfocus.com/bid/100523
• https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01