Johnson & Johnson MedTech in MedDevice Cyber coverage: 6 stories, 1 product named, 7 CVEs, and the company's own disclosures.
Biosense Webster released a free Security Service Pack (C3 V7.2 SSP 7.0, KT-0001-39) for CARTO 3 7.2.40.363 and 7.2.40.250, bundling updates, patches and security controls. Customers order it through sales.
Biosense Webster released two free Security Service Packs for CARTO 3: C3 V6 SSP 5.0 (KT-0001-30) for V6.0.70.100 and V6.0.80.45, and C3 V7.1 SSP 6.0 (KT-0001-31) for V7.1.80.33.
Biosense Webster says CARTO 3 V6 and V7.1 run Windows with the Print Spool service enabled and vulnerable to PrintNightmare, CVE-2021-34527. Security Service Pack 4 (KT-0001-17/U) carries the fix.
Johnson & Johnson says the IFS Advanced Femtosecond Laser, COMPACT INTUITIV, SOVEREIGN COMPACT, WHITESTAR SIGNATURE PRO and VERITAS Vision System run QNX versions with the BadAlloc calloc() flaw CVE-2021-22156. Risk is rated controlled.
Biosense Webster's CARTO 3 V6 SP3 update, applied starting December 2020, rolls Windows patches and antivirus signatures onto CARTO 3 V6 to close known flaws including CVE-2018-12207, CVE-2019-11135 and CVE-2019-1318.
Biosense Webster reported controlled risk in CARTO 3 V4 and all systems built before April 2018 from missing OS patches and antivirus signatures, including EternalBlue era CVE-2017-0143 to CVE-2017-0148. The free CARTO 3 V6 upgrade applies the patches.
Johnson & Johnson MedTech products with the device attributes their own public documentation states, and the advisories in our coverage that share those attributes.
| Product | Device type | Attributes | Matched advisories |
|---|---|---|---|
| VELYS Robotic-Assisted Solution | Orthopedic Stereotaxic Instrument | 16 | 14 |
| VELYS Hip Navigation | Automated Radiological Image Processing Software | 13 | 8 |
| CUPTIMIZE Advanced | System, Image Processing, Radiological | 7 | 7 |
| CARTO 3 EP Navigation System with Signal Processing Unit | Computer, Diagnostic, Programmable | 10 | 6 |
| MONARCH Platform | Bronchoscope (Flexible Or Rigid) | 28 | 6 |
| Megadyne Telescoping Smoke Evacuation Pencil - 10ft tubing | Electrosurgical, Cutting & Coagulation & Accessories | 2 | 1 |
| CARTO 3 EP Navigation System Software V8.0 | Computer, Diagnostic, Programmable | 8 | 0 |
| CARTO 3 EP Navigation System V8.1 | Computer, Diagnostic, Programmable | 8 | 0 |
| CARTO 3 EP Navigation System V8.4 | Computer, Diagnostic, Programmable | 8 | 0 |
| CARTO 3 EP Navigation System V9.0 with PIU Plus | Computer, Diagnostic, Programmable | 8 | 0 |
| CARTO 3 EP Navigation System Version 7.2 | Computer, Diagnostic, Programmable | 9 | 0 |
| CARTO 3 EP Navigation System with Advanced Focus Mapping | Computer, Diagnostic, Programmable | 9 | 0 |
| CARTO 3 EP Navigation System with CARTOSOUND 4D Version 7.4 | Computer, Diagnostic, Programmable | 9 | 0 |
| Carto Octaray Mapping Catheter with Trueref Technology | Catheter, Intracardiac Mapping, High-Density Array | 2 | 0 |
| ENSEAL X1 Tissue Sealer | Electrosurgical, Cutting & Coagulation & Accessories | 1 | 0 |
| Harmonic 1100 Shears | Electrosurgical, Cutting & Coagulation & Accessories | 2 | 0 |
| HARMONIC 700 Shears | Instrument, Ultrasonic Surgical | 3 | 0 |
| LAGIS Endoscopic Instruments- Scissors | Electrosurgical, Cutting & Coagulation & Accessories | 1 | 0 |
| LASSOSTAR NAV Circular Mapping Catheter | Catheter, Electrode Recording, Or Probe, Electrode Recording | 2 | 0 |
| Medline ReNewal Reprocessed Biosense Webster Webster CS Catheter | Catheter, Recording, Electrode, Reprocessed | 4 | 0 |
| OPTRELL Mapping Catheter with TRUEref Technology | Catheter, Intracardiac Mapping, High-Density Array | 4 | 0 |
| Pentaray Nav eco High-Density Mapping Catheter | Catheter, Intracardiac Mapping, High-Density Array | 2 | 0 |
| TruDi Navigation System V3 | Ear, Nose, And Throat Stereotaxic Instrument | 6 | 0 |
| VERITAS Phacoemulsification Console | Unit, Phacofragmentation | 7 | 0 |