CVE-2017-12721

CVE-2017-12721 describes an Improper Certificate Validation vulnerability in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pumps (versions 1.1, 1.5, and 1.6). This flaw allows for a man-in-the-middle (MITM) attack due to the pump's failure to validate host certificates. Rated Medium severity (CVSS 5.9), the attack requires high complexity but could lead to high confidentiality impact without user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, though it did receive limited media coverage.