VULNERABILITY INTELLIGENCE

CVE-2019-13535

CVSS score4.6 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2019-11-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) version 1.20.2 and lower, the RFID security mechanism does not apply read protection, allowing for full read access of the RFID security mechanism data.

Weakness classification

  • CWE-693: Protection Mechanism Failure
  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references