CVE-2018-11401

In SimpliSafe Original, RF Interference e.g., an extremely strong 433.92 MHz signal by a physically proximate attacker does not cause a notification...

CVE-2018-11401

In SimpliSafe Original, RF Interference e.g., an extremely strong 433.92 MHz signal by a physically proximate attacker does not cause a notification...

CVE-2018-11401

CVE-2018-11401 concerns SimpliSafe Original. The issue, described in the NVD entry, is that RF interference from a physically proximate attacker (e.g., a strong 433.92 MHz signal) does not trigger a notification. The CVSSv3.0 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a base score of 4.6...

CVE-2018-11401: Undefined Security Weakness

In SimpliSafe Original, RF Interference e.g., an extremely strong 433.92 MHz signal by a physically proximate attacker does not cause a notification...

PT-2018-10546

Name of the Vulnerable Software and Affected Versions SimpliSafe Original affected versions not specified Description The issue concerns RF Interference, where a strong 433.92 MHz signal from a physically proximate attacker does not trigger a notification. Recommendations At the moment, there is ...

Authentication flaw

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3...

Design/Logic Flaw

Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life. CVSS v3 base score: 5.3, CVSS...

CVE-2017-12712

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3...

CVE-2017-12714

Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life. CVSS v3 base score: 5.3, CVSS...

CVE-2017-12712

CVE-2017-12712 affects Abbott Laboratories pacemakers (Accent/Anthem, Accent MRI, Assurity/Allure, Assurity MRI) and related ICD/CRT-D devices. Root cause: Improper Authentication (CWE-287) in the pacemaker authentication algorithm using an authentication key and timestamp, allowing a nearby atta...

CVE-2017-12716

CVE-2017-12716 affects Abbott/St. Jude pacemakers (Accent/Anthem family) with RF wireless interfaces. The root cause is Missing Encryption of Sensitive Data and related Improper Authentication issues in the device firmware, allowing a nearby attacker to issue commands via RF and potentially acces...

CVE-2017-12714: Improper Restriction of Power Consumption

Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life. CVSS v3 base score: 5.3, CVSS...

CVE-2017-12716: Missing Encryption of Sensitive Data

Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and Anthem pacemakers store the optional patient information without encryption. CV...

CVE-2017-12712: Improper Authentication

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3...

PT-2018-5444

Name of the Vulnerable Software and Affected Versions: Abbott Laboratories pacemakers affected versions not specified, however, it is mentioned that the affected devices are those manufactured prior to Aug 28, 2017. Description: The issue concerns pacemakers that do not restrict or limit the numb...

PT-2018-5443

Name of the Vulnerable Software and Affected Versions: Abbott Laboratories pacemakers versions prior to Aug 28, 2017 Description: The authentication algorithm in the pacemakers can be compromised or bypassed, allowing a nearby attacker to issue unauthorized commands via RF communications. This...

PT-2018-5445

Name of the Vulnerable Software and Affected Versions: Abbott Laboratories Accent and Anthem pacemakers versions prior to Aug 28, 2017 Description: The issue concerns the transmission of unencrypted patient information via RF communications to programmers and home monitoring units, as well as the...

Software Defined Radio Attack Tool: RFCrack

RFCrack is my personal RF test bench, it was developed for testing RF communications between any physical device that communicates over sub Ghz frequencies. IoT devices, Cars, Alarm Systems etc… Testing was done with the Yardstick One on OSX, but RFCrack should work fine in linux. Current support...

RFCrack - A Software Defined Radio Attack Tool

RFCrack is my personal RF test bench, it was developed for testing RF communications between any physical device that communicates over sub Ghz frequencies. IoT devices, Cars, Alarm Systems etc... Testing was done with the Yardstick One on OSX, but RFCrack should work fine in linux. Support for...

Cisco RF Gateway 1 Denial of Service Vulnerability

Cisco RF Gateway 1 devices is a gateway device from Cisco USA.TCP state machine is one of the TCP state machines. A denial of service vulnerability exists in the TCP state machine in Cisco RF Gateway 1 devices. A remote attacker could exploit this vulnerability by establishing a large number of T...