CVE-2019-13535mediumCWE-693

CVE-2019-13535: falha de média gravidade em Medtronic Valleylab FT10 Energy Platform…

Medtronic Valleylab FT10 and LS10 Protection Mechanism Failure

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Valleylab FT10 Energy Platform+ Monitorar Valleylab LS10 Energy Platform

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.6epss 0.4%
In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) version 1.20.2 and lower, the RFID security mechanism does not apply read protection, allowing for full read access of the RFID security mechanism data.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Medtronic · Valleylab FT10 Energy Platform (VLFT10GEN)Medtronic · Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States)
CVEs relacionadas — Medtronic Valleylab FT10 Energy Platform…

No mesmo produto, das mais perigosas para as menos.

CVE-2019-13543MEDIUMMedtronic Valleylab FT10 and FX8 Use of Hard-coded CredentialsEPSS 2.0%CVE-2019-13531MEDIUMMedtronic Valleylab FT10 and LS10 Improper AuthenticationEPSS 0.4%CVE-2019-13539HIGHMedtronic Valleylab FT10 and FX8 Reversible One-way HashEPSS 0.3%