High severity7.0NVD Advisory· Published Nov 8, 2019· Updated Jun 17, 2026

CVE-2019-13539

Description

Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use the descrypt algorithm for OS password hashing. While interactive, network-based logons are disabled, and attackers can use the other vulnerabilities within this report to obtain local shell access and access these hashes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Medtronic/Valleylab Exchange Client3 versions
cpe:2.3:a:medtronic:valleylab_exchange_client:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:medtronic:valleylab_exchange_client:*:*:*:*:*:*:*:*range: <=3.4
- (no CPE)range: <=3.4
- (no CPE)range: 0
Medtronic/Valleylab Ft10 Energy Platform Firmware
cpe:2.3:o:medtronic:valleylab_ft10_energy_platform_firmware:*:*:*:*:*:*:*:*
Range: <=4.0.0
Medtronic/Valleylab Fx8 Energy Platform Firmware
cpe:2.3:o:medtronic:valleylab_fx8_energy_platform_firmware:*:*:*:*:*:*:*:*
Range: <=1.1.0
Medtronic/Valleylab FT10 Energy Platformllm-fuzzy3 versions
<=4.0.0+ 2 more
- (no CPE)range: <=4.0.0
- (no CPE)range: 0
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.us-cert.gov/ics/advisories/icsma-19-311-02nvdThird Party AdvisoryUS Government Resource
global.medtronic.com/xg-en/product-security/security-bulletins/valleylab-generator-rfid-vulnerabilities.htmlnvd
www.cisa.gov/news-events/ics-medical-advisories/icsma-19-311-02nvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000