CVE-2019-13543CWE-798

Medtronic Valleylab FT10 and FX8 Use of Hard-coded Credentials

Medium · published November 8, 2019

CVSS v3.1
5.8
EPSS
2%
Percentile
80.7
In the wild
Unconfirmed
What it is

Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use multiple sets of hard-coded credentials. If discovered, they can be used to read files on the device.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02011 · 80.7th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2019-11-08T19:03Z
EPSS history
Timeline
  • 08 NOV 19:03Z
    Medtronic Valleylab FT10 and FX8 Use of Hard-coded Credentials
    cvelistv5