CVE-2017-12718

A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump does not verify input buffer size prior to copying, leading to a buffer overflow, allowing remote code execution on the target device. The pump receives the potentially malicious input infrequently and under certain conditions, increasing the difficulty of exploitation.

• CWE-120
• CWE-119

• http://www.securityfocus.com/bid/100665Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/101252Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02AThird Party Advisory, US Government Resource
• https://www.exploit-db.com/exploits/43776/Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/100665Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/101252Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02AThird Party Advisory, US Government Resource
• https://www.exploit-db.com/exploits/43776/Third Party Advisory, VDB Entry

Published

Feb 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12711An Incorrect Privilege Assignment issue was discovered in Ad…
• CVE-2017-12712The authentication algorithm in Abbott Laboratories pacemake…
• CVE-2017-12713An Incorrect Permission Assignment for Critical Resource iss…
• CVE-2017-12714Abbott Laboratories pacemakers manufactured prior to Aug 28,…
• CVE-2017-12716Abbott Laboratories Accent and Anthem pacemakers manufacture…
• CVE-2017-12717An Uncontrolled Search Path Element issue was discovered in …
• CVE-2017-12719An Untrusted Pointer Dereference issue was discovered in Adv…
• CVE-2017-1272IBM Security Guardium 10.0 and 10.5 stores sensitive informa…3.7
• CVE-2017-12720An Improper Access Control issue was discovered in Smiths Me…
• CVE-2017-12721An Improper Certificate Validation issue was discovered in S…
• CVE-2017-12722An Out-of-bounds Read issue was discovered in Smiths Medical…
• CVE-2017-12723A Password in Configuration File issue was discovered in Smi…