Medium severity5.8NVD Advisory· Published Nov 8, 2019· Updated Jun 17, 2026

CVE-2019-13543

Description

Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use multiple sets of hard-coded credentials. If discovered, they can be used to read files on the device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Medtronic/Valleylab Exchange Client3 versions
cpe:2.3:a:medtronic:valleylab_exchange_client:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:medtronic:valleylab_exchange_client:*:*:*:*:*:*:*:*range: <=3.4
- (no CPE)range: <=3.4
- (no CPE)range: 0
Medtronic/Valleylab Ft10 Energy Platform Firmware
cpe:2.3:o:medtronic:valleylab_ft10_energy_platform_firmware:*:*:*:*:*:*:*:*
Range: <=4.0.0
Medtronic/Valleylab Fx8 Energy Platform Firmware
cpe:2.3:o:medtronic:valleylab_fx8_energy_platform_firmware:*:*:*:*:*:*:*:*
Range: <=1.1.0
Medtronic/Valleylab FT10 Energy Platformllm-fuzzy3 versions
<=4.0.0+ 2 more
- (no CPE)range: <=4.0.0
- (no CPE)range: 0
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.us-cert.gov/ics/advisories/icsma-19-311-02nvdThird Party AdvisoryUS Government Resource
global.medtronic.com/xg-en/product-security/security-bulletins/valleylab-generator-rfid-vulnerabilities.htmlnvd
www.cisa.gov/news-events/ics-medical-advisories/icsma-19-311-02nvd

News mentions

No linked articles in our index yet.

cvss	0.377
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000