CVE-2019-13543

🗓️ 08 Nov 2019 19:03:51Reported by icscertType

Multiple hard-coded credentials in Medtronic devices can allow unauthorized file access.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2019-13543	11 Feb 202408:37	–	circl
CNVD	Valleylab FT10 and Valleylab FX8 Trust Management Issues Vulnerability	11 Nov 201900:00	–	cnvd
Cvelist	CVE-2019-13543 Medtronic Valleylab FT10 and FX8 Use of Hard-coded Credentials	8 Nov 201919:03	–	cvelist
EUVD	EUVD-2019-4998	7 Oct 202500:30	–	euvd
ICS	Medtronic Valleylab FT10 and FX8	7 Nov 201900:00	–	ics
NVD	CVE-2019-13543	8 Nov 201920:15	–	nvd
Prion	Hardcoded credentials	8 Nov 201920:15	–	prion
RedhatCVE	CVE-2019-13543	22 May 202504:26	–	redhatcve

NVD

Vulners

Node

medtronic valleylab_exchange_clientRange≤3.4

Node

medtronic valleylab_ft10_energy_platform_firmwareRange≤4.0.0

AND

medtronic valleylab_ft10_energy_platformMatch-

Node

medtronic valleylab_fx8_energy_platform_firmwareRange≤1.1.0

AND

medtronic valleylab_fx8_energy_platformMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Valleylab Exchange Client",
    "vendor": "Medtronic",
    "versions": [
      {
        "lessThanOrEqual": "3.4",
        "status": "affected",
        "version": "0",
        "versionType": "c"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Valleylab FT10 Energy Platform (VLFT10GEN)",
    "vendor": "Medtronic",
    "versions": [
      {
        "lessThanOrEqual": "software version 4.0.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Valleylab FX8 Energy Platform (VLFX8GEN)",
    "vendor": "Medtronic",
    "versions": [
      {
        "lessThanOrEqual": "software version 1.1.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-medical-advisories/icsma-19-311-02
global	www.global.medtronic.com/xg-en/product-security/security-bulletins/valleylab-generator-rfid-vulnerabilities.html
us-cert	www.us-cert.gov/ics/advisories/icsma-19-311-02

22 May 2025 19:15Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 3.15.8 - 7.5

EPSS0.00665

CWE-798