CVE-2019-13543

2019-11-0819:03:51

CWE-798

icscert

www.cve.org

EPSS

0.002

Percentile

52.9%

JSON

Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use multiple sets of hard-coded credentials. If discovered, they can be used to read files on the device.

CNA Affected

[
  {
    "product": "Valleylab Exchange Client",
    "vendor": "Medtronic",
    "versions": [
      {
        "status": "affected",
        "version": "version 3.4 and below"
      }
    ]
  },
  {
    "product": "Valleylab FT10 Energy Platform (VLFT10GEN)",
    "vendor": "Medtronic",
    "versions": [
      {
        "status": "affected",
        "version": "software version 4.0.0 and below"
      }
    ]
  },
  {
    "product": "Valleylab FX8 Energy Platform (VLFX8GEN)",
    "vendor": "Medtronic",
    "versions": [
      {
        "status": "affected",
        "version": "software version 1.1.0 and below"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsma-19-311-02

EPSS

0.002

Percentile

52.9%

JSON

Related for CVELIST:CVE-2019-13543