Vulnerability in Abbott Accent
CVE-2017-12716
Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and Anthem pacemakers store the optional patient information without encryption. CVSS v3 base score: 3.1, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.002 (14.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 14th percentile — 14.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: -0.000
Affected products
- Abbott Accent
- Abbott Accent Firmware
- Abbott Accent Mri
- Abbott Accent Mri Firmware
- Abbott Accent St
- Abbott Accent St Firmware
- Abbott Anthem
- Abbott Anthem Firmware
- Abbott Laboratories Accent And Anthem — versions All versions of pacemakers manufactured prior to August 28, 2017
Weakness classification (CWE)
References
- ics-cert.us-cert.gov/advisories/ICSMA-17-241-01 (US Government Resource, Third Party Advisory)
- www.securityfocus.com/bid/100523 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2017-12716?
- CVE-2017-12716 is a medium-severity vulnerability in Abbott Accent, classified under Missing Encryption of Sensitive Data. CVSS score: 6.5/10. Published 2018-04-25.
- How severe is CVE-2017-12716?
- Medium severity. CVSS v3 base score is 6.5 out of 10.