CVE-2017-12701 BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerability which may allow an authenticated attacker to crash the CPAP's Wi-Fi module resulting i...
MediumCVSS 6.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerability which may allow an authenticated attacker to crash the CPAP's Wi-Fi module resulting in a denial-of-service condition.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cpap luna cpap machine firmware | < 20170701 | 20170701 |
| BMC Medical Luna CPAP Machine | = all devices released prior to July 1, 2017. | No fix listed |
References
- 100354 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource