CVE-2019-13539

HIGH 7.8CVE-2019-13539 · Published 08/11/2019 · updated 17/06/2026

In short

CVE-2019-13539 is a HIGH (CVSS 7.8) vulnerability affecting valleylab exchange client (medtronic).
Chance of exploitation in the next 30 days (EPSS): 0.27%, higher than 19.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
valleylab exchange client medtronic	`≤ 3.4`	No fix yet

Description

Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use the descrypt algorithm for OS password hashing. While interactive, network-based logons are disabled, and attackers can use the other vulnerabilities within this report to obtain local shell access and access these hashes.

References

More vulnerabilities in valleylab exchange client

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free