Riskcovery

CVE-2017-12716

State
Published
Severity
Not scored
Published
Apr 25, 2018
Updated
Sep 17, 2024
Reserved
Aug 9, 2017

Read the record on cve.org

Description

Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and Anthem pacemakers store the optional patient information without encryption. CVSS v3 base score: 3.1, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-311 Missing encryption of sensitive data CWE-311

Affected Products

ProductVersions
Accent and AnthemAbbott Laboratories
  • All versions of pacemakers manufactured prior to August 28, 2017Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.