Use of hard-coded credentials in Medtronic products - CVE-2019-13543
Published: November 11, 2019
Vulnerability identifier: #VU22640
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-13543
CWE-ID: CWE-798
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain full access to vulnerable system.
The vulnerability exists due to presence of hard-coded credentials in application code. A remote unauthenticated attacker can access the affected system using the hard-coded credentials and read files on the target system.
Affected software
Valleylab FX8 Energy Platform
Valleylab FT10 Energy Platform
Valleylab Exchange Client
Amazon Linux AMI
Gentoo Linux
Opensuse
Valleylab FT10 Energy Platform
Valleylab Exchange Client
Amazon Linux AMI
Gentoo Linux
Opensuse
How to mitigate CVE-2019-13543
Install updates from vendor's website.