Ethicon Endo-Surgery Generator G11 CVE-2017-14018 Local Authentication Bypass Vulnerability

Bugtraq ID:	101978
Class:	Input Validation Error
CVE:	CVE-2017-14018
Remote:	Yes
Local:	No
Published:	Nov 28 2017 12:00AM
Updated:	Dec 19 2017 10:37PM
Credit:	The vendor reported the issue.
Vulnerable:	Ethicon Endo-Surgery Generator Gen11
Not Vulnerable:

Ethicon Endo-Surgery Generator G11 CVE-2017-14018 Local Authentication Bypass Vulnerability

Ethicon Endo-Surgery Generator G11 is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may aid in further attacks.

All versions of Ethicon Endo-Surgery Generator Gen11 are vulnerable.

Ethicon Endo-Surgery Generator G11 CVE-2017-14018 Local Authentication Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Ethicon Endo-Surgery Generator G11 CVE-2017-14018 Local Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Ethicon Endo-Surgery Generator G11 CVE-2017-14018 Local Authentication Bypass Vulnerability

References:

• Ethicon Homepage (Ethicon)
  
• ICSMA-17-332-01:Ethicon Endo-Surgery Generator G11 Vulnerability (CERT)