Approved changes feed: RSS · Atom

cpe:2.3:a:medtronic:valleylab_ft10_energy_platform_(vlft10gen):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMedtronic (39ade870-5d3b-575a-9a52-512cca95c641)
ProductValleylab Ft10 Energy Platform (Vlft10Gen) (d1823392-fb79-53f5-a0b7-17eb4c0e120b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-13543 vulnerable 2026-06-08 05:12:52.085115 Medtronic Valleylab FT10 and FX8 Use of Hard-coded Credentials
MEDIUM (5.8)
Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use multiple sets of hard-coded credentials. If discovered, they can be used to read files on the device.
Published: 2019-11-08T19:03:51.000Z
Updated: 2025-05-22T19:03:49.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13539 vulnerable 2026-06-08 05:12:52.074768 Medtronic Valleylab FT10 and FX8 Reversible One-way Hash
HIGH (7)
Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use the descrypt algorithm for OS password hashing. While interactive, network-based logons are disabled, and attackers can use the other vulnerabilities within this report to obtain local shell access and access these hashes.
Published: 2019-11-08T19:07:59.000Z
Updated: 2025-05-22T19:06:39.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13535 vulnerable 2026-06-08 05:12:52.064459 Medtronic Valleylab FT10 and LS10 Protection Mechanism Failure
MEDIUM (4.6)
In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) version 1.20.2 and lower, the RFID security mechanism does not apply read protection, allowing for full read access of the RFID security mechanism data.
Published: 2019-11-08T19:45:55.000Z
Updated: 2025-05-22T18:39:28.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13531 vulnerable 2026-06-08 05:12:52.045123 Medtronic Valleylab FT10 and LS10 Improper Authentication
MEDIUM (4.8)
In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) version 1.20.2 and lower, the RFID security mechanism used for authentication between the FT10/LS10 Energy Platform and instruments can be bypassed, allowing for inauthentic instruments to connect to the generator.
Published: 2019-11-08T19:46:45.000Z
Updated: 2025-05-22T18:37:04.526Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.