Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communi…

Published 8 y ago 2018-04-25 · modified 4 mo ago 2026-06-17 · JSON

CVSS

6.5

v3.0 · NVD

CISA KEV

not known exploited

EPSS

0.2%

percentile 15%

Public exploits

none known

Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and Anthem pacemakers store the optional patient information without encryption. CVSS v3 base score: 3.1, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Abbott has developed a firmware update to help mitigate the identified vulnerabilities.

Exploit prediction (EPSS)

0.24% probability of exploitation in the next 30 days, higher than 15% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	6.5	`CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`
NVD	2.0	3.3	`AV:A/AC:L/Au:N/C:P/I:N/A:N`

Affected products

Abbott Laboratories Accent and Anthem

Classification

Weakness

CWE-311 Missing Encryption of Sensitive Data
CWE-319 Cleartext Transmission of Sensitive Information

References

ics-cert.us-cert.gov /advisories/ICSMA-17-241-01 · x_refsource_MISC, x_transferred
securityfocus.com /bid/100523 · vdb-entry, x_refsource_BID, x_transferred

Sources

CVE List: CVE-2017-12716
NVD: CVE-2017-12716

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.