CVE-2019-13535 Vulnerability Details

  /     /     /  

CVE-2019-13535 Metadata Quick Info

CVE Published: 08/11/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: icscert | Vendor: Medtronic | Product: Valleylab FT10 Energy Platform (VLFT10GEN)
Status : PUBLISHED

---

CVE-2019-13535 Description

In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) version 1.20.2 and lower, the RFID security mechanism does not apply read protection, allowing for full read access of the RFID security mechanism data.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-693
CWE Name: PROTECTION MECHANISM FAILURE CWE-693
Source: Medtronic

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).