CVE-2017-14018

An improper authentication issue was discovered in Johnson & Johnson Ethicon Endo-Surgery Generator Gen11, all versions released before November 29, 2017. The security authentication mechanism used between the Ethicon Endo-Surgery Generator Gen11 and single-patient use products can be bypassed, allowing for unauthorized devices to be connected to the generator, which could result in a loss of integrity or availability.

Score

CVSS 3.0 4.8 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2017-12-05

Last modified

2024-08-05

Weaknesses

CWE-287

Affected products

• Endo-surgery Generator Gen11 Firmware (Ethicon)

References

• http://www.securityfocus.com/bid/101978
• https://ics-cert.us-cert.gov/advisories/ICSMA-17-332-01