ID |
CVE-2017-12712
|
Sažetak |
The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3 base score: 7.5, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities. |
Reference |
|
CVSS |
Base: | 8.3 |
Impact: | 10.0 |
Exploitability: | 6.5 |
|
Pristup |
Vektor | Složenost | Autentikacija |
ADJACENT_NETWORK |
LOW |
NONE |
|
Impact |
Povjerljivost | Cjelovitost | Dostupnost |
COMPLETE |
COMPLETE |
COMPLETE |
|
CVSS vektor |
AV:A/AC:L/Au:N/C:C/I:C/A:C |
Zadnje važnije ažuriranje |
09-10-2019 - 23:23 |
Objavljeno |
25-04-2018 - 13:29 |