Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2019-13543

Medtronic Valleylab FT10 and FX8 Use of Hard-coded Credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use multiple sets of hard-coded credentials. If discovered, they can be used to read files on the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Medtronic Valleylab Exchange Client

Default version status: unaffected

  • 0 to ≤ 3.4affected

Medtronic Valleylab FT10 Energy Platform (VLFT10GEN)

Default version status: unaffected

  • 0 to ≤ software version 4.0.0affected

Medtronic Valleylab FX8 Energy Platform (VLFX8GEN)

Default version status: unaffected

  • 0 to ≤ software version 1.1.0affected

References