CVE-2017-14018 An improper authentication issue was discovered in Johnson & Johnson Ethicon Endo-Surgery Generator Gen11, all versions released before November 29, 2017. The security authentication mechanism used be...
MediumCVSS 4.8
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An improper authentication issue was discovered in Johnson & Johnson Ethicon Endo-Surgery Generator Gen11, all versions released before November 29, 2017. The security authentication mechanism used between the Ethicon Endo-Surgery Generator Gen11 and single-patient use products can be bypassed, allowing for unauthorized devices to be connected to the generator, which could result in a loss of integrity or availability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ethicon endo-surgery generator gen11 firmware | All versions | No fix listed |
References
- 101978 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource