CVE-2017-12701

Description

BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerability which may allow an authenticated attacker to crash the CPAP's Wi-Fi module resulting in a denial-of-service condition.

Affected products

• BMC Medical / Luna CPAP Machineall devices released prior to July 1, 2017. – all devices released prior to July 1, 2017.

References

• MISChttp://www.securityfocus.com/bid/100354
• VENDOR_ADVISORYhttps://ics-cert.us-cert.gov/advisories/ICSMA-17-227-01