CVE-2017-12718

CVE-2017-12718 is a classic buffer overflow vulnerability affecting Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pumps (versions 1.1, 1.5, and 1.6). This flaw, residing in a third-party component, allows remote code execution due to improper input buffer size verification. With a CVSS score of 8.1 (High), exploitation is complex due to infrequent and conditional reception of malicious input, but successful attacks could lead to high confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry exists for a Denial of Service, and the vulnerability has garnered some community and media attention.