PatchTheCVECVE-2017-12701: BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerabil
CVE-2017-12701 is a medium-severity flaw (CVSS 6.5) affecting luna cpap machine firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerability which may allow an authenticated attacker to crash the CPAP's Wi-Fi module resulting in a denial-of-service condition.
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.5 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 1.3% (top 30%) |
| CISA exploited list | No |
| Weakness | CWE-20 |
| Published | 2018-04-17 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2017-12701?
luna cpap machine firmware: upgrade to 20170701. Exact commands for each OS are on this page.
Is CVE-2017-12701 being exploited?
CVE-2017-12701 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2017-12701 affect?
CVE-2017-12701 affects luna cpap machine firmware. Severity is medium (CVSS 6.5). BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerability which may allow an authenticated attacker to crash the CPAP's Wi-Fi module resulting in a denial-of-service condition.
How urgent is CVE-2017-12701?
Priority 40/100. No elevated risk signals yet.