PatchTheCVECVE-2017-12718: A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump
CVE-2017-12718 is a high-severity flaw (CVSS 8.1) affecting medfusion 4000 wireless syringe infusion pump. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump does not verify input buffer size prior to copying, leading to a buffer overflow, allowing remote code execution on the target device. The pump receives the potentially malicious input infrequently and under certain conditions, increasing the difficulty of exploitation.
Why this priority
- High severity
- EPSS top 4%: very likely to be exploited
- Public exploit reference
- Remotely exploitable, no login, no user action
No fix is published yet: follow the downgrade or mitigation steps.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2017-12718?
medfusion 4000 wireless syringe infusion pump: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2017-12718 being exploited?
CVE-2017-12718 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2017-12718 affect?
CVE-2017-12718 affects medfusion 4000 wireless syringe infusion pump. Severity is high (CVSS 8.1). A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump does not verify input buffer size prior to copying, leading
How urgent is CVE-2017-12718?
Priority 62/100. High severity; EPSS top 4%: very likely to be exploited; Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2017-12726 HIGH 7.3 MITIGATE A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion P
- CVE-2017-12725 MEDIUM 5.6 MITIGATE A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusio
- CVE-2017-12724 HIGH 8.1 MITIGATE A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusio
- CVE-2017-12723 LOW 3.7 MITIGATE A Password in Configuration File issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusi
- CVE-2017-12722 MEDIUM 5.3 MITIGATE An Out-of-bounds Read issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Ve