Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-14018

Опубликовано: 05 дек. 2017
Источник: nvd
CVSS3: 4.8
CVSS2: 3.3
EPSS Низкий

Описание

An improper authentication issue was discovered in Johnson & Johnson Ethicon Endo-Surgery Generator Gen11, all versions released before November 29, 2017. The security authentication mechanism used between the Ethicon Endo-Surgery Generator Gen11 and single-patient use products can be bypassed, allowing for unauthorized devices to be connected to the generator, which could result in a loss of integrity or availability.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:ethicon:endo-surgery_generator_gen11_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:ethicon:endo-surgery_generator_gen11:-:*:*:*:*:*:*:*

EPSS

Процентиль: 35%
0.00142
Низкий

4.8 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-287
CWE-287

Связанные уязвимости

CVSS3: 4.8
github
больше 3 лет назад

An improper authentication issue was discovered in Johnson & Johnson Ethicon Endo-Surgery Generator Gen11, all versions released before November 29, 2017. The security authentication mechanism used between the Ethicon Endo-Surgery Generator Gen11 and single-patient use products can be bypassed, allowing for unauthorized devices to be connected to the generator, which could result in a loss of integrity or availability.

EPSS

Процентиль: 35%
0.00142
Низкий

4.8 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-287
CWE-287