CVE-2019-13539

🗓️ 08 Nov 2019 19:07:59Reported by icscertType

Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below are vulnerable to local shell access due to insecure OS password hashing

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2019-13539	11 Feb 202408:36	–	circl
CNVD	Valleylab FT10 and Valleylab FX8 Input Validation Error Vulnerability	11 Nov 201900:00	–	cnvd
Cvelist	CVE-2019-13539 Medtronic Valleylab FT10 and FX8 Reversible One-way Hash	8 Nov 201919:07	–	cvelist
EUVD	EUVD-2019-4994	7 Oct 202500:30	–	euvd
ICS	Medtronic Valleylab FT10 and FX8	7 Nov 201900:00	–	ics
NVD	CVE-2019-13539	8 Nov 201920:15	–	nvd
Prion	Design/Logic Flaw	8 Nov 201920:15	–	prion
RedhatCVE	CVE-2019-13539	22 May 202504:27	–	redhatcve

NVD

Vulners

Node

medtronic valleylab_exchange_clientRange≤3.4

Node

medtronic valleylab_ft10_energy_platform_firmwareRange≤4.0.0

AND

medtronic valleylab_ft10_energy_platformMatch-

Node

medtronic valleylab_fx8_energy_platform_firmwareRange≤1.1.0

AND

medtronic valleylab_fx8_energy_platformMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Valleylab Exchange Client",
    "vendor": "Medtronic",
    "versions": [
      {
        "lessThanOrEqual": "3.4",
        "status": "affected",
        "version": "0",
        "versionType": "c"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Valleylab FT10 Energy Platform (VLFT10GEN)",
    "vendor": "Medtronic",
    "versions": [
      {
        "lessThanOrEqual": "software version 4.0.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Valleylab FX8 Energy Platform (VLFX8GEN)",
    "vendor": "Medtronic",
    "versions": [
      {
        "lessThanOrEqual": "software version 1.1.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-medical-advisories/icsma-19-311-02
global	www.global.medtronic.com/xg-en/product-security/security-bulletins/valleylab-generator-rfid-vulnerabilities.html
us-cert	www.us-cert.gov/ics/advisories/icsma-19-311-02

22 May 2025 19:15Current

7.7High risk

Vulners AI Score7.7

CVSS 27.2

CVSS 3.17 - 7.8

EPSS0.00213