EUVD-2017-4251

Malware in sbrugna...

EUVD-2017-4255

Malware in sbrugna...

Comcast RF Attack Leveraged Remotes for Surveillance

More details about a now-patched vulnerability in Comcast’s XR11 voice remotes have emerged, which would have made it easy for a threat actor to intercept radio frequency RF communications between the remote and the set-top box, effectively turning the remote into a surveillance device. The XR11...

CVE-2017-12712

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3...

Authentication flaw

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3...

CVE-2017-12712

CVE-2017-12712 affects Abbott Laboratories pacemakers (Accent/Anthem, Accent MRI, Assurity/Allure, Assurity MRI) and related ICD/CRT-D devices. Root cause: Improper Authentication (CWE-287) in the pacemaker authentication algorithm using an authentication key and timestamp, allowing a nearby atta...

CVE-2017-12716

CVE-2017-12716 affects Abbott/St. Jude pacemakers (Accent/Anthem family) with RF wireless interfaces. The root cause is Missing Encryption of Sensitive Data and related Improper Authentication issues in the device firmware, allowing a nearby attacker to issue commands via RF and potentially acces...

PT-2018-5443

Name of the Vulnerable Software and Affected Versions: Abbott Laboratories pacemakers versions prior to Aug 28, 2017 Description: The authentication algorithm in the pacemakers can be compromised or bypassed, allowing a nearby attacker to issue unauthorized commands via RF communications. This...

PT-2018-5445

Name of the Vulnerable Software and Affected Versions: Abbott Laboratories Accent and Anthem pacemakers versions prior to Aug 28, 2017 Description: The issue concerns the transmission of unencrypted patient information via RF communications to programmers and home monitoring units, as well as the...

CVE-2017-12712: Improper Authentication

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3...

CVE-2017-12716: Missing Encryption of Sensitive Data

Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and Anthem pacemakers store the optional patient information without encryption. CV...

FDA Recalls 465K Pacemakers Tied to MedSec Research

The United States Federal Drug Administration is recalling 465,000 pacemakers that attackers can gain unauthorized access to issue commands, change settings and maliciously disrupt. Affected are four models manufactured by Abbott Laboratories. According to the FDA, the recalls of affected...