Medtronic Valleylab FT10 and LS10 Protection Mechanism Failure
Vulnerability Description
In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) version 1.20.2 and lower, the RFID security mechanism does not apply read protection, allowing for full read access of the RFID security mechanism data.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-13535
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Medtronic reported these vulnerabilities to CISA.
References
More from Medtronic
View All →Affected Vendor
Medtronic
View all reports →