CVE-2019-13539highCWE-328

CVE-2019-13539: fallo de gravedad alta en Medtronic Valleylab Exchange Client

Medtronic Valleylab FT10 and FX8 Reversible One-way Hash

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Valleylab FT10 Energy Platform+ Monitorear Valleylab Exchange Client

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7epss 0.3%
Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use the descrypt algorithm for OS password hashing. While interactive, network-based logons are disabled, and attackers can use the other vulnerabilities within this report to obtain local shell access and access these hashes.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Medtronic · Valleylab Exchange ClientMedtronic · Valleylab FT10 Energy Platform (VLFT10GEN)Medtronic · Valleylab FX8 Energy Platform (VLFX8GEN)
CVEs relacionadas — Medtronic Valleylab Exchange Client

En el mismo producto, de las más peligrosas a las menos.

CVE-2019-13543MEDIUMMedtronic Valleylab FT10 and FX8 Use of Hard-coded CredentialsEPSS 2.0%CVE-2019-13531MEDIUMMedtronic Valleylab FT10 and LS10 Improper AuthenticationEPSS 0.4%CVE-2019-13535MEDIUMMedtronic Valleylab FT10 and LS10 Protection Mechanism FailureEPSS 0.4%