MEDIUM🇵🇱 Wersja polska

CVE-2017-12716

CVSS 6.5v3.0pub. 2018-04-25upd. 2024-11-21

Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and Anthem pacemakers store the optional patient information without encryption. CVSS v3 base score: 3.1, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.

CVSS Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Abbott Accent

    HW
    Abbott
    wszystkie wersje

  • Abbott Accent Firmware

    OS
    Abbott
    < f0b.0e.7e

  • Abbott Accent Mri

    HW
    Abbott
    wszystkie wersje

  • Abbott Accent Mri Firmware

    OS
    Abbott
    < f10.08.6c

  • Abbott Accent St

    HW
    Abbott
    wszystkie wersje

  • Abbott Accent St Firmware

    OS
    Abbott
    < f10.08.6c

  • Abbott Anthem

    HW
    Abbott
    wszystkie wersje

  • Abbott Anthem Firmware

    OS
    Abbott
    < f0b.0e.7e
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2017-12712HIGH8.8ten sam produkt

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which invol...

CVE-2017-12714MEDIUM6.5ten sam produkt

Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of corre...

CVE-2020-8997HIGH8.8ten sam vendor

Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write ...

CVE-2017-5149HIGH8.9ten sam vendor

An issue was discovered in St. Jude Medical Merlin@home, versions prior to Version 8.2.2 (RF models: EX1150; I...

CVE-2023-47262MEDIUM5.2ten sam vendor

The startup process and device configurations of the Abbott ID NOW device, before v7.1, can be interrupted and...