Medtronic Valleylab FT10 and FX8
Successful exploitation of these vulnerabilities may allow an attacker to overwrite files or remotely execute code, resulting in a remote, non-root shell on the affected products. By default, the network connections on these devices are disabled. Additionally, the Ethernet port is disabled upon reboot. However, it is known that network connectivity is often enabled.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-13543US | high7.5OT elevated | — | ||
Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN)… | ||||
| CVE-2019-13539US | high7.8 | — | ||
Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN)… | ||||
| CVE-2019-3464US | critical9.8 | — | ||
Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSMA-19-311-02 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (9)
- FixedValleylab Exchange Client
Medtronic has released additional patient focused information, at the following location:
- FixedValleylab Exchange Client
Medtronic has released additional patient focused information, at the following location:
- FixedValleylab Exchange Client
Medtronic has released additional patient focused information, at the following location:
- FixedValleylab FT10 Energy Platform (VLFT10GEN) software
Medtronic has released additional patient focused information, at the following location:
- FixedValleylab FT10 Energy Platform (VLFT10GEN) software
Medtronic has released additional patient focused information, at the following location:
- FixedValleylab FT10 Energy Platform (VLFT10GEN) software
Medtronic has released additional patient focused information, at the following location:
- FixedValleylab FX8 Energy Platform (VLFX8GEN) software
Medtronic has released additional patient focused information, at the following location:
- FixedValleylab FX8 Energy Platform (VLFX8GEN) software
Medtronic has released additional patient focused information, at the following location:
- FixedValleylab FX8 Energy Platform (VLFX8GEN) software
Medtronic has released additional patient focused information, at the following location:
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan