CVE-2017-12716

Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and Anthem pacemakers store the optional patient information without encryption. CVSS v3 base score: 3.1, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.
References
Link Resource
http://www.securityfocus.com/bid/100523 Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01 Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/100523 Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:abbott:accent_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abbott:accent:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:abbott:anthem_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abbott:anthem:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:abbott:accent_mri_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abbott:accent_mri:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:abbott:accent_st_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:abbott:accent_st:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:10

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/100523 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/100523 - Third Party Advisory, VDB Entry
References () https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01 - Third Party Advisory, US Government Resource () https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01 - Third Party Advisory, US Government Resource

Information

Published : 2018-04-25 13:29

Updated : 2024-11-21 03:10


NVD link : CVE-2017-12716

Mitre link : CVE-2017-12716

CVE.ORG link : CVE-2017-12716


JSON object : View

Products Affected

abbott

  • anthem
  • accent_st
  • accent_st_firmware
  • accent_mri_firmware
  • accent
  • accent_mri
  • anthem_firmware
  • accent_firmware
CWE
CWE-311

Missing Encryption of Sensitive Data

CWE-319

Cleartext Transmission of Sensitive Information