Medtronic Valleylab FT10 and FX8
Successful exploitation of these vulnerabilities may allow an attacker to overwrite files or remotely execute code, resulting in a remote, non-root shell on the affected products. By default, the network connections on these devices are disabled. Additionally, the Ethernet port is disabled upon reboot. However, it is known that network connectivity is often enabled.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-13543US | high7.5OT erhöht | — | ||
Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN)… | ||||
| CVE-2019-13539US | high7.8 | — | ||
Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN)… | ||||
| CVE-2019-3464US | critical9.8 | — | ||
Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSMA-19-311-02 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (9)
- BehobenValleylab Exchange Client
Medtronic has released additional patient focused information, at the following location:
- BehobenValleylab Exchange Client
Medtronic has released additional patient focused information, at the following location:
- BehobenValleylab Exchange Client
Medtronic has released additional patient focused information, at the following location:
- BehobenValleylab FT10 Energy Platform (VLFT10GEN) software
Medtronic has released additional patient focused information, at the following location:
- BehobenValleylab FT10 Energy Platform (VLFT10GEN) software
Medtronic has released additional patient focused information, at the following location:
- BehobenValleylab FT10 Energy Platform (VLFT10GEN) software
Medtronic has released additional patient focused information, at the following location:
- BehobenValleylab FX8 Energy Platform (VLFX8GEN) software
Medtronic has released additional patient focused information, at the following location:
- BehobenValleylab FX8 Energy Platform (VLFX8GEN) software
Medtronic has released additional patient focused information, at the following location:
- BehobenValleylab FX8 Energy Platform (VLFX8GEN) software
Medtronic has released additional patient focused information, at the following location:
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan