CVE-2017-12716

CVE-2017-12716 affects Abbott/St. Jude pacemakers (Accent/Anthem family) with RF wireless interfaces. The root cause is Missing Encryption of Sensitive Data and related Improper Authentication issues in the device firmware, allowing a nearby attacker to issue commands via RF and potentially acces...

CVE-2017-12712

CVE-2017-12712 affects Abbott Laboratories pacemakers (Accent/Anthem, Accent MRI, Assurity/Allure, Assurity MRI) and related ICD/CRT-D devices. Root cause: Improper Authentication (CWE-287) in the pacemaker authentication algorithm using an authentication key and timestamp, allowing a nearby atta...

Software Defined Radio Attack Tool: RFCrack

RFCrack is my personal RF test bench, it was developed for testing RF communications between any physical device that communicates over sub Ghz frequencies. IoT devices, Cars, Alarm Systems etc… Testing was done with the Yardstick One on OSX, but RFCrack should work fine in linux. Current support...

RFCrack - A Software Defined Radio Attack Tool

RFCrack is my personal RF test bench, it was developed for testing RF communications between any physical device that communicates over sub Ghz frequencies. IoT devices, Cars, Alarm Systems etc... Testing was done with the Yardstick One on OSX, but RFCrack should work fine in linux. Support for...

Cisco RF Gateway 1 Denial of Service Vulnerability

Cisco RF Gateway 1 devices is a gateway device from Cisco USA.TCP state machine is one of the TCP state machines. A denial of service vulnerability exists in the TCP state machine in Cisco RF Gateway 1 devices. A remote attacker could exploit this vulnerability by establishing a large number of T...

Race condition

A vulnerability in the TCP state machine of Cisco RF Gateway 1 devices could allow an unauthenticated, remote attacker to prevent an affected device from delivering switched digital video SDV or video on demand VoD streams, resulting in a denial of service DoS condition. The vulnerability is due ...

CVE-2017-12318

A vulnerability in the TCP state machine of Cisco RF Gateway 1 devices could allow an unauthenticated, remote attacker to prevent an affected device from delivering switched digital video SDV or video on demand VoD streams, resulting in a denial of service DoS condition. The vulnerability is due ...

CVE-2017-12318

CVE-2017-12318 affects Cisco RF Gateway 1 devices. The issue is a vulnerability in the TCP state machine where an unauthenticated, remote attacker can exhaust resources by opening a large number of TCP connections and not closing them, causing DoS by preventing SDV/VoD streams to set-top boxes. R...

CVE-2017-12318

A vulnerability in the TCP state machine of Cisco RF Gateway 1 devices could allow an unauthenticated, remote attacker to prevent an affected device from delivering switched digital video SDV or video on demand VoD streams, resulting in a denial of service DoS condition. The vulnerability is due ...

Cisco RF Gateway 1 TCP Connection Denial of Service Vulnerability

A vulnerability in the TCP state machine of Cisco RF Gateway 1 devices could allow an unauthenticated, remote attacker to prevent an affected device from delivering switched digital video SDV or video on demand VoD streams, resulting in a denial of service DoS condition. The vulnerability is due ...

Design/Logic Flaw

A vulnerability in Extensible Authentication Protocol EAP ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service...

CVE-2017-12274

A vulnerability in Extensible Authentication Protocol EAP ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service...

Race condition

A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service DoS condition. The...

CVE-2017-12273

CVE-2017-12273 is a vulnerability in 802.11 association request frame processing that affects Cisco Aironet 1560, 2800, and 3800 Series APs running Lightweight AP Software or Mobility Express. A unauthenticated, Layer-2 adjacent attacker can send a malformed 802.11 association request to cause th...

CVE-2017-12274

Cisco Aironet 1560, 2800, and 3800 Series Access Points are affected by CVE-2017-12274 due to improper validation in Extensible Authentication Protocol (EAP) ingress frame processing. An unauthenticated, Layer 2 adjacent attacker can trigger a reload of the AP by sending a malformed EAP frame, re...

CVE-2017-12273

A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service DoS condition. The...

FDA Recalls 465K Pacemakers Tied to MedSec Research

The United States Federal Drug Administration is recalling 465,000 pacemakers that attackers can gain unauthorized access to issue commands, change settings and maliciously disrupt. Affected are four models manufactured by Abbott Laboratories. According to the FDA, the recalls of affected...

Unauthorized Access Vulnerability in Various Abbott Laboratories Pacemaker Products

Accent, Anthem, Accent MRI, Assurity, Allure and Assurity MRI are implantable medical devices from Abbott Laboratories USA. An unauthorized access vulnerability exists in several Abbott Laboratories pacemaker products, where pacemaker authentication algorithms involving authentication keys and...

rf.5u56.com Open Redirect vulnerability

Vulnerable URL: http://rf.5u56.com/url.php?url=aHR0cHM6Ly93d3cub3BlbmJ1Z2JvdW50eS5vcmc= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websit...

SedSystems D3 Decimator Default Credentials / File Disclosure

SedSystems D3 Decimator Multiple Vulnerabilities ================================================ Identification of the vulnerable device can be performed by scanning for TCP port 9784 which offers a default remote API. When connected to this device it will announce itself with "connected" or...