CVE-2019-13539highCWE-328

CVE-2019-13539: falha de alta gravidade em Medtronic Valleylab Exchange Client

Medtronic Valleylab FT10 and FX8 Reversible One-way Hash

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Valleylab FT10 Energy Platform+ Monitorar Valleylab Exchange Client

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7epss 0.3%
Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use the descrypt algorithm for OS password hashing. While interactive, network-based logons are disabled, and attackers can use the other vulnerabilities within this report to obtain local shell access and access these hashes.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Medtronic · Valleylab Exchange ClientMedtronic · Valleylab FT10 Energy Platform (VLFT10GEN)Medtronic · Valleylab FX8 Energy Platform (VLFX8GEN)
CVEs relacionadas — Medtronic Valleylab Exchange Client

No mesmo produto, das mais perigosas para as menos.

CVE-2019-13543MEDIUMMedtronic Valleylab FT10 and FX8 Use of Hard-coded CredentialsEPSS 2.0%CVE-2019-13531MEDIUMMedtronic Valleylab FT10 and LS10 Improper AuthenticationEPSS 0.4%CVE-2019-13535MEDIUMMedtronic Valleylab FT10 and LS10 Protection Mechanism FailureEPSS 0.4%