Summary
Successful exploitation of these vulnerabilities may allow an attacker to overwrite files or remotely execute code, resulting in a remote, non-root shell on the affected products. By default, the network connections on these devices are disabled. Additionally, the Ethernet port is disabled upon reboot. However, it is known that network connectivity is often enabled.
Vulnerabilities 3
-
High 7.0
Medtronic Valleylab FT10 and FX8 Reversible One-way Hash
Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use the descrypt algorithm for OS password ha…
-
Medium 5.8
Medtronic Valleylab FT10 and FX8 Use of Hard-coded Credentials
Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform (VLFT10GEN) software version 4.0.0 and below, and Valleylab FX8 Energy Platform (VLFX8GEN) software version 1.1.0 and below use multiple sets of hard-coded credentials. …
-
Unscored —
Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restr…
Revision history
-
#1
ICSMA-19-311-02 Medtronic Valleylab FT10 and FX8
References
-
ICS Advisory ICSMA-19-311-02 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-311-02
-
Recommended Practices
https://www.fda.gov/medical-devices/digital-health/cybersecurity
-
Recommended Practices
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-311-02
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B