Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2017-12712
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3 base score: 7.5, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
认证机制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
多款Abbott产品安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Abbott Accent等都是美国雅培(Abbott)公司的心脏起搏器设备。 多款Abbott产品中存在身份验证绕过漏洞。远程攻击者可借助RF通信利用该漏洞控制或绕过身份验证算法,从而发送未授权的命令。以下产品和版本受到影响:Abbott Accent F0B.0E.7E之前的版本;Accent MRI F10.08.6C之前的版本;Accent ST F10.08.6C之前的版本;Allure F14.07.80之前的版本;Anthem F0B.0E.7E之前的版本;Assurity F14.07.8
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
Abbott LaboratoriesAccent/Anthem, Accent MRI, Assurity/Allure, and Assurity MRI. All versions of pacemakers manufactured prior to August 28, 2017 -
II. Public POCs for CVE-2017-12712
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2017-12712
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2017-12712

No comments yet


Leave a comment