CVE-2019-13531
Medtronic Valleylab FT10 and LS10 Improper Authentication
- State
- Published
- Severity
- 4.8 Medium
- Published
- Nov 8, 2019
- Updated
- May 22, 2025
- Reserved
- Jul 11, 2019
Description
In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) version 1.20.2 and lower, the RFID security mechanism used for authentication between the FT10/LS10 Energy Platform and instruments can be bypassed, allowing for inauthentic instruments to connect to the generator.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.8 Medium | CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L | icscert |
Weaknesses
- CWE-287 Improper Authentication
Affected Products
| Product | Versions |
|---|---|
Valleylab FT10 Energy Platform (VLFT10GEN)Medtronic |
|
Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States)Medtronic |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.