Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2019-13539

Medtronic Valleylab FT10 and FX8 Reversible One-way Hash

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use the descrypt algorithm for OS password hashing. While interactive, network-based logons are disabled, and attackers can use the other vulnerabilities within this report to obtain local shell access and access these hashes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Medtronic Valleylab Exchange Client

Default version status: unaffected

  • 0 to ≤ 3.4affected

Medtronic Valleylab FT10 Energy Platform (VLFT10GEN)

Default version status: unaffected

  • 0 to ≤ software version 4.0.0affected

Medtronic Valleylab FX8 Energy Platform (VLFX8GEN)

Default version status: unaffected

  • 0 to ≤ software version 1.1.0affected

References