GE Medical Devices CVE-2017-14006 Authentication Bypass Vulnerability

Bugtraq ID:	103429
Class:	Design Error
CVE:	CVE-2017-14006
Remote:	Yes
Local:	No
Published:	Feb 06 2018 12:00AM
Updated:	Feb 06 2018 12:00AM
Credit:	Scott Erven
Vulnerable:	General Electric Xeleris 3.1 General Electric Xeleris 3.0 General Electric Xeleris 2.1 General Electric Xeleris 1.1 General Electric Xeleris 1.0
Not Vulnerable:

GE Medical Devices CVE-2017-14006 Authentication Bypass Vulnerability

GE Medical Devices are prone to a remote authentication-bypass vulnerability.

An attacker can exploit this issue to gain unauthorized access to the affected device. Successful exploits will result in the complete compromise of the affected device.

GE Medical Devices CVE-2017-14006 Authentication Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GE Medical Devices CVE-2017-14006 Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

GE Medical Devices CVE-2017-14006 Authentication Bypass Vulnerability

References:

• GE homepage (General Electric)
  
• ICSMA-18-037-02: GE Medical Devices Vulnerability (ICS-CERT)