CVE-2017-12714

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-04-25 · updated 2026-06-17
Weakness: CWE-920

Description

Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life. CVSS v3 base score: 5.3, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.

Affected products

Abbott Accent Firmware: before f0b.0e.7e — fixed in f0b.0e.7e
Abbott Accent Mri Firmware: before f10.08.6c — fixed in f10.08.6c
Abbott Accent St Firmware: before f10.08.6c — fixed in f10.08.6c
Abbott Allure Firmware: before f14.07.80 — fixed in f14.07.80
Abbott Anthem Firmware: before f0b.0e.7e — fixed in f0b.0e.7e
Abbott Assurity Firmware: before f14.07.80 — fixed in f14.07.80
Abbott Assurity Mri Firmware: before f17.01.49 — fixed in f17.01.49

How to fix

Upgrade to a fixed version: Abbott Accent Firmware f0b.0e.7e; Abbott Accent Mri Firmware f10.08.6c; Abbott Accent St Firmware f10.08.6c; Abbott Allure Firmware f14.07.80; Abbott Anthem Firmware f0b.0e.7e; Abbott Assurity Firmware f14.07.80; Abbott Assurity Mri Firmware f17.01.49. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-12714 or the next vulnerability affects your stack