CVE-2017-12716
Medium
Description
Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and Anthem pacemakers store the optional patient information without encryption. CVSS v3 base score: 3.1, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.
SeverityMedium
CVSS6.5
Exploit probability—
ProductAbbott Accent Firmware
PublishedApr 25, 2018
First seenApr 25, 2018
Weakness typeCWE-311CWE-311
How to fix
Update
- abbott accent_firmwaref0b.0e.7e or later
- abbott anthem_firmwaref0b.0e.7e or later
- abbott accent_mri_firmwaref10.08.6c or later
- abbott accent_st_firmwaref10.08.6c or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| abbott accent_firmware | v < f0b.0e.7e | f0b.0e.7e |
| abbott anthem_firmware | v < f0b.0e.7e | f0b.0e.7e |
| abbott accent_mri_firmware | v < f10.08.6c | f10.08.6c |
| abbott accent_st_firmware | v < f10.08.6c | f10.08.6c |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.