Bypass of RFID Authentication in Medtronic Valleylab FT10 and LS10 Energy Platforms
CVE-2019-13531

4.6MEDIUM

Key Information:

Vendor

Medtronic

Status
Valleylab Ft10 Energy Platform (vlft10gen)
Valleylab Ls10 Energy Platform (vlls10gen—not Available In The United States)
Vendor
CVE Published:
8 November 2019

What is CVE-2019-13531?

The Medtronic Valleylab FT10 and LS10 Energy Platforms have a vulnerability allowing unauthorized instruments to connect to the energy generator. This is due to a bypass in the RFID security mechanism used for authentication, compromising the integrity of connected instruments. The vulnerability affects specific versions of the FT10 and LS10 platforms, posing potential risks in clinical settings. It's crucial for users to ensure that their devices are updated to mitigate any security concerns.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Valleylab FT10 Energy Platform (VLFT10GEN) 0 <= 2.1.0

Valleylab FT10 Energy Platform (VLFT10GEN) 0 <= 2.0.3

Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) 0 <= 1.20.2

References

https://global.medtronic.com/xg-en/product-security/secur...
https://www.cisa.gov/news-events/ics-medical-advisories/i...

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.