| |
Vulnerability CVE-2017-12712
Published: 2018-04-25
Description: |
The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3 base score: 7.5, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities. |
Type:
CWE-287 (Improper Authentication)
CVSS2 => (AV:A/AC:L/Au:N/C:C/I:C/A:C)
CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
8.3/10 |
10/10 |
6.5/10 |
Exploit range |
Attack complexity |
Authentication |
Adjacent network |
Low |
No required |
Confidentiality impact |
Integrity impact |
Availability impact |
Complete |
Complete |
Complete |
References: |
http://www.securityfocus.com/bid/100523
https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01
|
|
|
Copyright 2024, cxsecurity.com
|
|
|