CVE-2017-12714

🗓️ 25 Apr 2018 13:00:00Reported by icscertType

Abbott Labs pacemakers pre-Aug 28, 2017 allow unlimited "RF wake-up" commands, enabling nearby attackers to deplete battery

Reporter	Title	Published	Views	Family All 8
CNVD	Abbott Laboratories Multiple Pacemaker Products Access Count Limit Vulnerability	30 Aug 201700:00	–	cnvd
Cvelist	CVE-2017-12714	25 Apr 201813:00	–	cvelist
EUVD	EUVD-2017-4253	7 Oct 202500:30	–	euvd
ICS	ICSMA-17-241-01_Abbott Laboratories ' Accent/Anthem, Accent MRI, Assurity/Allure, and Assurity MRI Pacemaker Vulnerabilities	29 Aug 201700:00	–	ics
ICS	Abbott Laboratories Defibrillator	17 Apr 201800:00	–	ics
NVD	CVE-2017-12714	25 Apr 201813:29	–	nvd
Prion	Design/Logic Flaw	25 Apr 201813:29	–	prion
ThreatPost	FDA Recalls 465K Pacemakers Tied to MedSec Research	31 Aug 201713:26	–	threatpost

NVD

Vulners

Node

abbott accent_firmwareRange<f0b.0e.7e

AND

abbott accentMatch-

Node

abbott anthem_firmwareRange<f0b.0e.7e

AND

abbott anthemMatch-

Node

abbott accent_mri_firmwareRange<f10.08.6c

AND

abbott accent_mriMatch-

Node

abbott accent_st_firmwareRange<f10.08.6c

AND

abbott accent_stMatch-

Node

abbott assurity_firmwareRange<f14.07.80

AND

abbott assurityMatch-

Node

abbott allure_firmwareRange<f14.07.80

AND

abbott allureMatch-

Node

abbott assurity_mri_firmwareRange<f17.01.49

AND

abbott assurity_mriMatch-

[
  {
    "product": "Accent/Anthem, Accent MRI, Assurity/Allure, and Assurity MRI.",
    "vendor": "Abbott Laboratories",
    "versions": [
      {
        "status": "affected",
        "version": "All versions of pacemakers manufactured prior to August 28, 2017"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSMA-17-241-01
securityfocus	www.securityfocus.com/bid/100523

21 Nov 2024 03:10Current

6.5Medium risk

Vulners AI Score6.5

CVSS 26.1

CVSS 36.5

EPSS0.00215

CWE-920