CVE-2017-12712

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3 base score: 7.5, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.

• CWE-287
• CWE-287

• http://www.securityfocus.com/bid/100523Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/100523Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01Third Party Advisory, US Government Resource

Published

Apr 25, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12707A Stack-based Buffer Overflow issue was discovered in Spider…
• CVE-2017-12708An Improper Restriction Of Operations Within The Bounds Of A…
• CVE-2017-12709A Use of Hard-Coded Credentials issue was discovered in MRD-…
• CVE-2017-1271IBM Security Guardium 9.0, 9.1, and 9.5 supports interaction…
• CVE-2017-12710A SQL Injection issue was discovered in Advantech WebAccess …
• CVE-2017-12711An Incorrect Privilege Assignment issue was discovered in Ad…
• CVE-2017-12713An Incorrect Permission Assignment for Critical Resource iss…
• CVE-2017-12714Abbott Laboratories pacemakers manufactured prior to Aug 28,…
• CVE-2017-12716Abbott Laboratories Accent and Anthem pacemakers manufacture…
• CVE-2017-12717An Uncontrolled Search Path Element issue was discovered in …
• CVE-2017-12718A Classic Buffer Overflow issue was discovered in Smiths Med…
• CVE-2017-12719An Untrusted Pointer Dereference issue was discovered in Adv…