Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-12665 State: PUBLISHED Published: 2017-08-07T21:00:00 Last Updated: 2024-08-05T18:43:56.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/577 - https://github.com/ImageMagick/ImageMagick/commit/c1b09bbec148f6ae11d0b686fdb89ac6dc0ab14e
CVE ID: CVE-2017-12666 State: PUBLISHED Published: 2017-08-07T21:00:00 Last Updated: 2024-08-05T18:43:56.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteINLINEImage in coders/inline.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/572 - http://www.securityfocus.com/bid/100226 - https://github.com/ImageMagick/ImageMagick/commit/d5559407ce29f4371e5df9c1cbde65455fe5854c
CVE ID: CVE-2017-12667 State: PUBLISHED Published: 2017-08-07T21:00:00 Last Updated: 2024-08-05T18:43:56.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMATImage in coders\mat.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/553 - https://github.com/ImageMagick/ImageMagick/commit/bfb7915d4b2e11acb6a819e451c382dc645277db
CVE ID: CVE-2017-12668 State: PUBLISHED Published: 2017-08-07T21:00:00 Last Updated: 2024-08-05T18:43:56.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePCXImage in coders/pcx.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/575 - https://github.com/ImageMagick/ImageMagick/commit/2ba8f335fa06daf1165e0878462686028e633a74
CVE ID: CVE-2017-12669 State: PUBLISHED Published: 2017-08-07T21:00:00 Last Updated: 2024-08-05T18:43:56.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteCALSImage in coders/cals.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/571 - https://github.com/ImageMagick/ImageMagick/commit/73b6c35cede48ccb2e29dbe62c2d77488e5e70b7
CVE ID: CVE-2017-12670 State: PUBLISHED Published: 2017-08-07T21:00:00 Last Updated: 2024-08-05T18:43:56.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function DestroyImage in MagickCore/image.c, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - http://www.securityfocus.com/bid/100252 - https://github.com/ImageMagick/ImageMagick/issues/610 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg000
lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-12671 State: PUBLISHED Published: 2017-08-07T21:00:00 Last Updated: 2024-08-05T18:43:56.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/621 - https://www.debian.org/security/2017/dsa-4019
CVE ID: CVE-2017-12672 State: PUBLISHED Published: 2017-08-07T21:00:00 Last Updated: 2024-08-05T18:43:56.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100224 - https://github.com/ImageMagick/ImageMagick/issues/617
CVE ID: CVE-2017-12673 State: PUBLISHED Published: 2017-08-07T21:00:00 Last Updated: 2024-08-05T18:43:56.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100228 - https://github.com/ImageMagick/ImageMagick/issues/619
CVE ID: CVE-2017-12674 State: PUBLISHED Published: 2017-08-07T21:00:00 Last Updated: 2024-08-05T18:43:56.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/604 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-12675 State: PUBLISHED Published: 2017-08-07T21:00:00Z Last Updated: 2024-09-17T01:56:37.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/616
CVE ID: CVE-2017-12676 State: PUBLISHED Published: 2017-08-07T21:00:00 Last Updated: 2024-08-05T18:43:56.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/618 - http://www.securityfocus.com/bid/100225
CVE ID: CVE-2017-12677 State: PUBLISHED Published: 2017-08-08T01:00:00Z Last Updated: 2024-09-16T23:15:23.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: IdentityServer3 2.4.x, 2.5.x, and 2.6.x before 2.6.1 has XSS in an Angular expression on the authorize response page, which might allow remote attackers to obtain sensitive information about the IdentityServer authorization response. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/IdentityServer/IdentityServer3/releases/tag/2.6.1
CVE ID: CVE-2017-12678 State: PUBLISHED Published: 2017-08-08T01:00:00 Last Updated: 2024-08-05T18:43:56.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/taglib/taglib/issues/829 - https://github.com/taglib/taglib/pull/831 - https://github.com/taglib/taglib/commit/cb9f07d9dcd791b63e622da43f7b232adaec0a9a - https://lists.debian.org/debian-lts-announce/2021/
b.com/taglib/taglib/commit/cb9f07d9dcd791b63e622da43f7b232adaec0a9a - https://lists.debian.org/debian-lts-announce/2021/09/msg00020.html
CVE ID: CVE-2017-12679 State: PUBLISHED Published: 2017-08-24T17:00:00 Last Updated: 2024-08-05T18:43:56.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bingtanguan/cve/blob/master/201701
CVE ID: CVE-2017-12680 State: PUBLISHED Published: 2017-08-18T16:00:00 Last Updated: 2024-08-05T18:43:56.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) exists in NexusPHP 1.5 via the type parameter to shoutbox.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100424 - http://www.lsafe.org/cve.txt
CVE ID: CVE-2017-12691 State: PUBLISHED Published: 2017-09-01T21:00:00 Last Updated: 2024-08-05T18:43:56.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - https://github.com/ImageMagick/ImageMagick/issues/656 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-12692 State: PUBLISHED Published: 2017-09-01T21:00:00 Last Updated: 2024-08-05T18:43:56.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted VIFF file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - https://github.com/ImageMagick/ImageMagick/issues/653 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-12693 State: PUBLISHED Published: 2017-09-01T21:00:00 Last Updated: 2024-08-05T18:43:56.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted BMP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/652 - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-12694 State: PUBLISHED Published: 2017-08-25T19:00:00 Last Updated: 2024-08-05T18:43:56.452Z Vendors: n/a Products: SpiderControl SCADA Web Server Problem Types: CWE-22 Description: A Directory Traversal issue was discovered in SpiderControl SCADA Web Server. An attacker may be able to use a simple GET request to perform a directory traversal into system files. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-234-03 - http://www.securityfocus.com/bid/100456
CVE ID: CVE-2017-12695 State: PUBLISHED Published: 2018-01-09T21:00:00 Last Updated: 2024-08-05T18:43:56.428Z Vendors: n/a Products: General Motors and Shanghai OnStar (SOS) iOS Client Problem Types: CWE-287 Description: An Improper Authentication issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to subvert security mechanisms and reset a user account password. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04 - http://www.securityfocus.com/bid/102481
CVE ID: CVE-2017-12697 State: PUBLISHED Published: 2018-01-09T21:00:00 Last Updated: 2024-08-05T18:43:56.540Z Vendors: n/a Products: General Motors and Shanghai OnStar (SOS) iOS Client Problem Types: CWE-300 Description: A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to intercept sensitive information when the client connects to the server. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04 - http://www.securityfocus.com/bid/102481
CVE ID: CVE-2017-12698 State: PUBLISHED Published: 2017-08-30T18:00:00 Last Updated: 2024-08-05T18:43:56.460Z Vendors: n/a Products: Advantech WebAccess Problem Types: CWE-287 Description: An Improper Authentication issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Specially crafted requests allow a possible authentication bypass that could allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02 - http://www.securityfocus.com/bid/100526
CVE ID: CVE-2017-12699 State: PUBLISHED Published: 2017-09-09T01:00:00 Last Updated: 2024-08-05T18:43:56.461Z Vendors: n/a Products: AzeoTech DAQFactory Problem Types: CWE-276 Description: An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Local, non-administrative users may be able to replace or modify original application files with malicious ones. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100522 - https://ics-cert.us-cert.gov/advisories/ICSA-17-241-01
CVE ID: CVE-2017-12701 State: PUBLISHED Published: 2018-04-17T14:00:00Z Last Updated: 2024-09-17T02:27:16.151Z Vendors: BMC Medical Products: Luna CPAP Machine Problem Types: CWE-20 Description: BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerability which may allow an authenticated attacker to crash the CPAP's Wi-Fi module resulting in a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100354 - https://ics-cert.us-cert.gov/advisories/ICSMA-17-227-01
CVE ID: CVE-2017-12702 State: PUBLISHED Published: 2017-08-30T18:00:00 Last Updated: 2024-08-05T18:43:56.457Z Vendors: n/a Products: Advantech WebAccess Problem Types: CWE-134 Description: An Externally Controlled Format String issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. String format specifiers based on user provided input are not properly validated, which could allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02 - http://www.securityfocus.com/bid/100526
CVE ID: CVE-2017-12703 State: PUBLISHED Published: 2017-08-25T16:00:00 Last Updated: 2024-08-05T18:43:56.419Z Vendors: n/a Products: Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455 Problem Types: CSRF Description: A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The application does not verify whether a request was intentionally provided by the user, making it possible for an attacker to trick a user into making a malicious request to the server. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01 - htt
ional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01 - http://www.securityfocus.com/bid/100470
CVE ID: CVE-2017-12704 State: PUBLISHED Published: 2017-08-30T18:00:00 Last Updated: 2024-08-05T18:43:56.536Z Vendors: n/a Products: Advantech WebAccess Problem Types: CWE-122 Description: A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to the heap-based buffer, which could allow an attacker to execute arbitrary code under the context of the process. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02 - http://www.secu
t Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02 - http://www.securityfocus.com/bid/100526
CVE ID: CVE-2017-12705 State: PUBLISHED Published: 2017-10-25T07:00:00 Last Updated: 2024-08-05T18:43:56.429Z Vendors: n/a Products: Advantech WebOP Problem Types: heap-based buffer overflow Description: A Heap-Based Buffer Overflow issue was discovered in Advantech WebOP. A maliciously crafted project file may be able to trigger a heap-based buffer overflow, which may crash the process and allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99476 - https://ics-cert.us-cert.gov/advisories/ICSA-17-227-01
CVE ID: CVE-2017-12706 State: PUBLISHED Published: 2017-08-30T18:00:00 Last Updated: 2024-08-05T18:43:56.460Z Vendors: n/a Products: Advantech WebAccess Problem Types: CWE-121 Description: A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could allow an attacker to execute arbitrary code under the context of the process. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02 - http://www.secu
CVE ID: CVE-2017-12707 State: PUBLISHED Published: 2017-08-25T19:00:00 Last Updated: 2024-08-05T18:43:56.479Z Vendors: n/a Products: SpiderControl SCADA MicroBrowser Problem Types: CWE-121 Description: A Stack-based Buffer Overflow issue was discovered in SpiderControl SCADA MicroBrowser Versions 1.6.30.144 and prior. Opening a maliciously crafted html file may cause a stack overflow. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-234-02 - http://www.securityfocus.com/bid/100453
CVE ID: CVE-2017-12708 State: PUBLISHED Published: 2017-08-30T18:00:00 Last Updated: 2024-08-05T18:43:56.601Z Vendors: n/a Products: Advantech WebAccess Problem Types: CWE-119 Description: An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities that allow invalid locations to be referenced for the memory buffer, which may allow an attacker to execute arbitrary code or cause the system to crash. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02 - http://www.securityfocus.com/bi
rogram Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02 - http://www.securityfocus.com/bid/100526
CVE ID: CVE-2017-12709 State: PUBLISHED Published: 2017-08-25T16:00:00 Last Updated: 2024-08-05T18:43:56.442Z Vendors: n/a Products: Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455 Problem Types: CWE-798 Description: A Use of Hard-Coded Credentials issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The device utilizes hard-coded credentials, which could allow for unauthorized local low-privileged access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01 - http://www.securityfocus.com/bid/100470
CVE ID: CVE-2017-12710 State: PUBLISHED Published: 2017-08-30T18:00:00 Last Updated: 2024-08-05T18:43:56.619Z Vendors: n/a Products: Advantech WebAccess Problem Types: CWE-89 Description: A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. By submitting a specially crafted parameter, it is possible to inject arbitrary SQL statements that could allow an attacker to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2017-29 - https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02 - http://www.securityfocus.com/bid/100526 - http://www.zerodayinitiative.com/advisorie
ert.gov/advisories/ICSA-17-241-02 - http://www.securityfocus.com/bid/100526 - http://www.zerodayinitiative.com/advisories/ZDI-17-712/
CVE ID: CVE-2017-12711 State: PUBLISHED Published: 2017-08-30T18:00:00 Last Updated: 2024-08-05T18:43:56.462Z Vendors: n/a Products: Advantech WebAccess Problem Types: CWE-266 Description: An Incorrect Privilege Assignment issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A built-in user account has been granted a sensitive privilege that may allow a user to elevate to administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02 - http://www.securityfocus.com/bid/100526
CVE ID: CVE-2017-12712 State: PUBLISHED Published: 2018-04-25T13:00:00Z Last Updated: 2024-09-17T03:48:37.996Z Vendors: Abbott Laboratories Products: Accent/Anthem, Accent MRI, Assurity/Allure, and Assurity MRI. Problem Types: CWE-287 Description: The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3 base score: 7.5, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabil
: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01 - http://www.securityfocus.com/bid/100523
CVE ID: CVE-2017-12713 State: PUBLISHED Published: 2017-08-30T18:00:00 Last Updated: 2024-08-05T18:43:56.614Z Vendors: n/a Products: Advantech WebAccess Problem Types: CWE-732 Description: An Incorrect Permission Assignment for Critical Resource issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Multiple files and folders with ACLs that affect other users are allowed to be modified by non-administrator accounts. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-241-02 - http://www.securityfocus.com/bid/100526
CVE ID: CVE-2017-12714 State: PUBLISHED Published: 2018-04-25T13:00:00Z Last Updated: 2024-09-17T00:16:50.163Z Vendors: Abbott Laboratories Products: Accent/Anthem, Accent MRI, Assurity/Allure, and Assurity MRI. Problem Types: CWE-920 Description: Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life. CVSS v3 base score: 5.3, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities. Additional Analys
U/C:N/I:N/A:H. Abbott has developed a firmware update to help mitigate the identified vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-241-01 - http://www.securityfocus.com/bid/100523
CVE ID: CVE-2017-12716 State: PUBLISHED Published: 2018-04-25T13:00:00Z Last Updated: 2024-09-17T01:55:36.387Z Vendors: Abbott Laboratories Products: Accent and Anthem Problem Types: CWE-311 Description: Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and Anthem pacemakers store the optional patient information without encryption. CVSS v3 base score: 3.1, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Abbott has developed a firmware update to help mitigate the identified vulnerabilities. Additional Analyst Notes: - CVE