PT-2017-13203 · Johnson & Johnson · Ethicon Endo-Surgery Generator Gen11

Publicado 2017-12-05 · Atualizado 2019-10-09 · CVE-2017-14018

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:L/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Johnson & Johnson Ethicon Endo-Surgery Generator Gen11 versions prior to November 29, 2017

Description An issue with improper authentication was found, allowing the security authentication mechanism between the Ethicon Endo-Surgery Generator Gen11 and single-patient use products to be bypassed. This enables unauthorized devices to connect to the generator, potentially resulting in a loss of integrity or availability.

Recommendations For Johnson & Johnson Ethicon Endo-Surgery Generator Gen11 versions prior to November 29, 2017, ensure that only authorized devices are connected to the generator to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-14018

Produtos afetados

Ethicon Endo-Surgery Generator Gen11

Referências · 3

• https://ics-cert.us-cert.gov/advisories/ICSMA-17-332-01 · Nota
• http://securityfocus.com/bid/101978 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-14018 · Nota de Segurança