← Back

CVE-2019-13531

nvd nist
Published: Nov 8, 2019Modified: Jun 17, 2026

JSON object

Loading...
4.6
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 0.9 / Impact: 3.6
Source: NVD

Description

In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) version 1.20.2 and lower, the RFID security mechanism used for authentication between the FT10/LS10 Energy Platform and instruments can be bypassed, allowing for inauthentic instruments to connect to the generator.

Affected (3)

Medtronic
2 products
Valleylab Ft10 Energy Platform Firmware
Valleylab Ls10 Energy Platform Firmware
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Medtronic
Valleylab Ft10 Energy Platform Firmware
Version 2.0.3
Valleylab Ft10 Energy Platform Firmware
Version 2.1.0
Running on/withPlatform Versions
Medtronic
Valleylab Ft10 Energy Platform
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Valleylab Ls10 Energy Platform Firmware
Up to 1.20.2
Running on/withPlatform Versions
Medtronic
Valleylab Ls10 Energy Platform
All versions

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (3)

Source: ics-cert@hq.dhs.gov
Source: ics-cert@hq.dhs.gov
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.