Lucene search

[email protected]NVD:CVE-2017-12716

HistoryApr 25, 2018 - 1:29 p.m.

CVE-2017-12716

2018-04-2513:29:00

CWE-319

CWE-311

[email protected]

web.nvd.nist.gov

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

21.0%

JSON

Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and Anthem pacemakers store the optional patient information without encryption. CVSS v3 base score: 3.1, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.

Affected configurations

Nvd

Node

abbottaccent_firmwareRange<f0b.0e.7e

AND

abbottaccentMatch-

Node

abbottanthem_firmwareRange<f0b.0e.7e

AND

abbottanthemMatch-

Node

abbottaccent_mri_firmwareRange<f10.08.6c

AND

abbottaccent_mriMatch-

Node

abbottaccent_st_firmwareRange<f10.08.6c

AND

abbottaccent_stMatch-

VendorProductVersionCPE
abbottaccent_firmware*cpe:2.3:o:abbott:accent_firmware:*:*:*:*:*:*:*:*
abbottaccent-cpe:2.3:h:abbott:accent:-:*:*:*:*:*:*:*
abbottanthem_firmware*cpe:2.3:o:abbott:anthem_firmware:*:*:*:*:*:*:*:*
abbottanthem-cpe:2.3:h:abbott:anthem:-:*:*:*:*:*:*:*
abbottaccent_mri_firmware*cpe:2.3:o:abbott:accent_mri_firmware:*:*:*:*:*:*:*:*
abbottaccent_mri-cpe:2.3:h:abbott:accent_mri:-:*:*:*:*:*:*:*
abbottaccent_st_firmware*cpe:2.3:o:abbott:accent_st_firmware:*:*:*:*:*:*:*:*
abbottaccent_st-cpe:2.3:h:abbott:accent_st:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
abbott	accent_firmware	*	cpe:2.3:o:abbott:accent_firmware::::::::
abbott	accent	-	cpe:2.3:h:abbott:accent:-:::::::*
abbott	anthem_firmware	*	cpe:2.3:o:abbott:anthem_firmware::::::::
abbott	anthem	-	cpe:2.3:h:abbott:anthem:-:::::::*
abbott	accent_mri_firmware	*	cpe:2.3:o:abbott:accent_mri_firmware::::::::
abbott	accent_mri	-	cpe:2.3:h:abbott:accent_mri:-:::::::*
abbott	accent_st_firmware	*	cpe:2.3:o:abbott:accent_st_firmware::::::::
abbott	accent_st	-	cpe:2.3:h:abbott:accent_st:-:::::::*

References

www.securityfocus.com/bid/100523

ics-cert.us-cert.gov/advisories/ICSMA-17-241-01

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

21.0%

JSON

Related for NVD:CVE-2017-12716

cvelist1 prion1 cve1 ics1 threatpost1