EUVD-2019-4998

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Medtronic Valleylab systems have hard-coded credentials, risking unauthorized file access on devices.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2019-13543	11 Feb 202408:37	–	circl
CNVD	Valleylab FT10 and Valleylab FX8 Trust Management Issues Vulnerability	11 Nov 201900:00	–	cnvd
CVE	CVE-2019-13543	8 Nov 201919:03	–	cve
Cvelist	CVE-2019-13543 Medtronic Valleylab FT10 and FX8 Use of Hard-coded Credentials	8 Nov 201919:03	–	cvelist
ICS	Medtronic Valleylab FT10 and FX8	7 Nov 201900:00	–	ics
NVD	CVE-2019-13543	8 Nov 201920:15	–	nvd
Prion	Hardcoded credentials	8 Nov 201920:15	–	prion
RedhatCVE	CVE-2019-13543	22 May 202504:26	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "dd0b98ba-7e36-3c1c-af18-7c51ab2ade65",
        "vendor": {
          "name": "Medtronic"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0c5ebeff-74f8-3792-8a88-c57fbcb3485e",
        "product": {
          "name": "Valleylab FX8 Energy Platform (VLFX8GEN)"
        },
        "product_version": "software version 1.1.0 and below"
      },
      {
        "id": "239c607d-a937-3808-ae77-27e46caad5aa",
        "product": {
          "name": "Valleylab Exchange Client"
        },
        "product_version": "version 3.4 and below"
      },
      {
        "id": "484e9d76-0961-3bba-af42-dbf7d2f078c3",
        "product": {
          "name": "Valleylab FT10 Energy Platform (VLFT10GEN)"
        },
        "product_version": "software version 4.0.0 and below"
      },
      {
        "id": "4bdbaa6c-8e9a-3d11-81af-0860ee7f65d1",
        "product": {
          "name": "Valleylab Exchange Client"
        },
        "product_version": "0 ≤3.4"
      },
      {
        "id": "8df347d0-d8da-32e2-901b-f098ae27ee40",
        "product": {
          "name": "Valleylab FX8 Energy Platform (VLFX8GEN)"
        },
        "product_version": "0 ≤software version 1.1.0"
      },
      {
        "id": "ceefb8df-3438-384b-be70-6c49cd0d7901",
        "product": {
          "name": "Valleylab FT10 Energy Platform (VLFT10GEN)"
        },
        "product_version": "0 ≤software version 4.0.0"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.gov/ics/advisories/icsma-19-311-02
cisa	www.cisa.gov/news-events/ics-medical-advisories/icsma-19-311-02
global	www.global.medtronic.com/xg-en/product-security/security-bulletins/valleylab-generator-rfid-vulnerabilities.html
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.5High risk

Vulners AI Score7.5

CVSS 3.15.8 - 7.5

CVSS 25

EPSS0.00665