CVE-2017-12716

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-04-25 · updated 2026-06-17
Weakness: CWE-311

Description

Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and Anthem pacemakers store the optional patient information without encryption. CVSS v3 base score: 3.1, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.

Affected products

Abbott Accent Firmware: before f0b.0e.7e — fixed in f0b.0e.7e
Abbott Accent Mri Firmware: before f10.08.6c — fixed in f10.08.6c
Abbott Accent St Firmware: before f10.08.6c — fixed in f10.08.6c
Abbott Anthem Firmware: before f0b.0e.7e — fixed in f0b.0e.7e

How to fix

Upgrade to a fixed version: Abbott Accent Firmware f0b.0e.7e; Abbott Accent Mri Firmware f10.08.6c; Abbott Accent St Firmware f10.08.6c; Abbott Anthem Firmware f0b.0e.7e. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-12716 or the next vulnerability affects your stack