Vulnerabilities > CVE-2020-8997 - Out-of-bounds Write vulnerability in Abbott Freestyle Libre Firmware

047910
CVSS 5.8 - MEDIUM
Attack vector
ADJACENT_NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
low complexity
abbott
CWE-787

Summary

Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write access to memory via a specific NFC unlock command. NOTE: The vulnerability is not present in the FreeStyle Libre 14-day in the U.S (announced in August 2018) and FreeStyle Libre 2 outside the U.S (announced in October 2018).

Vulnerable Configurations

Part Description Count
OS
Abbott
1
Hardware
Abbott
1

Common Weakness Enumeration (CWE)