PT-2017-13203 · Johnson & Johnson · Ethicon Endo-Surgery Generator Gen11

Published 2017-12-05 · Updated 2019-10-09 · CVE-2017-14018

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Johnson & Johnson Ethicon Endo-Surgery Generator Gen11 versions prior to November 29, 2017

Description An issue with improper authentication was found, allowing the security authentication mechanism between the Ethicon Endo-Surgery Generator Gen11 and single-patient use products to be bypassed. This enables unauthorized devices to connect to the generator, potentially resulting in a loss of integrity or availability.

Recommendations For Johnson & Johnson Ethicon Endo-Surgery Generator Gen11 versions prior to November 29, 2017, ensure that only authorized devices are connected to the generator to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2017-14018

Affected Products

Ethicon Endo-Surgery Generator Gen11

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-14018 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSMA-17-332-01 · Note
• http://securityfocus.com/bid/101978 · Note