Password Hashing Vulnerability in Medtronic Energy Platforms and Valleylab Client

CVE-2019-13539

What is CVE-2019-13539?

The Medtronic Valleylab Exchange Client and its associated energy platforms utilize the outdated descrypt algorithm for hashing operating system passwords. Despite network-based logons being disabled, this vulnerability allows attackers to exploit other weaknesses to gain local shell access and retrieve sensitive password hashes. This flaw highlights serious concerns regarding the security measures in place, especially in critical healthcare environments.

References