CVE-2019-13539CWE-328

Medtronic Valleylab FT10 and FX8 Reversible One-way Hash

High · published November 8, 2019

CVSS v3.1
7.0
EPSS
0%
Percentile
17.9
In the wild
Unconfirmed
What it is

Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use the descrypt algorithm for OS password hashing. While interactive, network-based logons are disabled, and attackers can use the other vulnerabilities within this report to obtain local shell access and access these hashes.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00268 · 17.9th percentile
Weakness
CWE-328 · Use of Weak Hash
Published
2019-11-08T19:07Z
EPSS history
Timeline
  • 08 NOV 19:07Z
    Medtronic Valleylab FT10 and FX8 Reversible One-way Hash
    cvelistv5