CVE-2019-13543mediumCWE-798

CVE-2019-13543: falha de média gravidade em Medtronic Valleylab Exchange Client

Medtronic Valleylab FT10 and FX8 Use of Hard-coded Credentials

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Valleylab FT10 Energy Platform+ Monitorar Valleylab Exchange Client

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.8epss 2.0%
Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use multiple sets of hard-coded credentials. If discovered, they can be used to read files on the device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Produtos afetados
Medtronic · Valleylab Exchange ClientMedtronic · Valleylab FT10 Energy Platform (VLFT10GEN)Medtronic · Valleylab FX8 Energy Platform (VLFX8GEN)
CVEs relacionadas — Medtronic Valleylab Exchange Client

No mesmo produto, das mais perigosas para as menos.

CVE-2019-13531MEDIUMMedtronic Valleylab FT10 and LS10 Improper AuthenticationEPSS 0.4%CVE-2019-13535MEDIUMMedtronic Valleylab FT10 and LS10 Protection Mechanism FailureEPSS 0.4%CVE-2019-13539HIGHMedtronic Valleylab FT10 and FX8 Reversible One-way HashEPSS 0.3%