CVE-2017-12712
Estado: ModificadaAlta (8.8)—
The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3 base score: 7.5, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 8.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.05%
- Percentil entre todas las CVEs puntuadas: 63
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (7)
CWE
- CWE-287
- CWE-287
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2017-12712",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 8.3,
"accessVector": "ADJACENT_NETWORK",
"vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.5,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 8.8,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "ics-cert@hq.dhs.gov",
"affectedData": [
{
"vendor": "Abbott Laboratories",
"product": "Accent/Anthem, Accent MRI, Assurity/Allure, and Assurity MRI.",
"versions": [
{
"status": "affected",
"version": "All versions of pacemakers manufactured prior to August 28, 2017"
}
]
}
]
}
],
"published": "2018-04-25T13:29:00.227",
"references": [
{
"url": "http://www.securityfocus.com/bid/100523",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "http://www.securityfocus.com/bid/100523",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3 base score: 7.5, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities."
},
{
"lang": "es",
"value": "El algoritmo de autenticación en los marcapasos de Abbott Laboratories fabricados antes del 28 de agosto de 2017, que está relacionado con una clave de autenticación y una marca de tiempo, puede comprometerse u omitirse. Esto puede permitir que un atacante cercano envíe comandos no autorizados al marcapasos mediante comunicaciones de radiofrecuencia. Puntuación base de CVSS v3: 7.5, cadena de vector CVSS: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Abbott ha desarrollado una actualización de firmware para ayudar a mitigar las vulnerabilidades identificadas."
}
],
"lastModified": "2026-06-17T01:03:49.720",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:abbott:accent_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFF25F4E-CF32-41A5-9AEC-5CF2A1D70732",
"versionEndExcluding": "f0b.0e.7e"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:abbott:accent:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7261AA88-1BD6-4CDF-AFC0-31FD7F52B9E7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:abbott:anthem_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D6C940D7-5EA3-4D42-8FFE-0C38D2D0065E",
"versionEndExcluding": "f0b.0e.7e"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:abbott:anthem:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4B28402F-D4DF-448B-8ED3-676E0B438331"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:abbott:accent_mri_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFC7CD6D-57F8-4479-A25C-9B9937FD3793",
"versionEndExcluding": "f10.08.6c"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:abbott:accent_mri:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C752B8AA-8990-43DE-AB8B-57329E1E0AE1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:abbott:accent_st_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CCA1805-9253-4267-ACE9-B9F3BBB1549A",
"versionEndExcluding": "f10.08.6c"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:abbott:accent_st:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "794620AF-C8D5-4511-B4AF-5E8B4347F558"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:abbott:assurity_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BF37E32-78D2-48CD-BF19-17533E3CB5DF",
"versionEndExcluding": "f14.07.80"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:abbott:assurity:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "83B2EBFC-FB8A-402E-8C5C-118D4362B143"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:abbott:allure_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "858B3E80-0179-4AD7-BC32-3AA87A7341C6",
"versionEndExcluding": "f14.07.80"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:abbott:allure:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "65B30268-EC36-42C3-8028-D345DC22A3DC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:abbott:assurity_mri_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95E52CB5-DB4A-42FE-B963-CE891D3C1A95",
"versionEndExcluding": "f17.01.49"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:abbott:assurity_mri:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "43025EB2-8644-4BC5-BC3D-D67305C504B7"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov"
}