CVE-2017-12714 - Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life

Back Back to CVE browser

MEDIUM

Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life

Published Apr 25, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 0.63%

Description

Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life. CVSS v3 base score: 5.3, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.

Affected products

Vendor Abbott Laboratories Product Accent/Anthem, Accent MRI, Assurity/Allure, and Assurity MRI. Default
n/a
- Version
  All versions of pacemakers manufactured prior to August 28, 2017
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Abbott Laboratories

Accent/Anthem, Accent MRI, Assurity/Allure, and Assurity MRI.

n/a

Version	Status	Constraints
All versions of pacemakers manufactured prior to August 28, 2017	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-920

References (2)

http://www.securityfocus.com/bid/100523
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/100523		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01		x_refsource_MISCThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Apr 25, 2018

Updated Sep 17, 2024

Reserved Aug 9, 2017

Link CVE-2017-12714

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-12714

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-12714