Medtronic Valleylab FT10/FX8 Hardcoded Credentials & RCE Vulnerabilities (CVE-2019-3593/3530)

Critical Vulnerability Information 1. Vulnerability Overview CVSS v3.0: 8.0 Threat Level: Remotely exploitable / Low skill level required Vendor: Medtronic Devices: Valleylab FT10, Valleylab FX8 Vulnerability Types: Hardcoded credentials, Reversible one-way hash, Improper input validation 2. Risk Assessment Successful exploitation of these vulnerabilities may allow an attacker to overwrite files or execute code remotely, leading to service disruption or unauthorized access to affected products. By default, network connectivity is disabled, and the filter port is disabled after reset. However, network connectivity is known to be frequently enabled in practice. 3. Technical Details 3.1 Affected Products Valleylab Exchange Client version 3.4 and earlier Valleylab FT10 Energy Platform (WFTCEN) software version 4.0.0 and earlier Valleylab FX8 Energy Platform (WFRCFN) software version 1.1.0 and earlier 3.2 Vulnerability Summary 3.2.1 Hardcoded Credentials (CWE-798) Affected products use multiple sets of hardcoded credentials. If discovered, these can be used to read files on the device. CVE-2019-3593 CVSS v3.0 Base Score: 5.6 3.2.2 Reversible One-Way Hash (CWE-328) Affected products use reversible algorithms for OS password hashing. Although interactive and network logins are disabled, attackers could exploit other vulnerabilities described in this report to gain local shell access and retrieve these hashes. CVE-2019-3530 CVSS v3.0 Base Score: 7.0 3.2.3 Improper Input Validation (CWE-20) Affected products use a vulnerable version of the utility to facilitate file uploads. This could enable an attacker with administrative privileges to access files or execute arbitrary code. CVE-2019-MDA and CVE-2019-MDB CVSS v3.0 Base Score: 9.0 4. Mitigation Measures Software patches are currently available for the FT10 platform and will be available for the FX8 platform by early 2020. Prior to applying these updates, Medtronic recommends disconnecting affected devices from IP networks or isolating them, ensuring they are not accessible from untrusted networks (such as the internet). Patches can be downloaded from: https://www.medtronic.com/solutions/en-us/support/software.html Medtronic has also published additional patient safety information, available at: https://www.medtronic.com/security 5. Additional Recommendations Minimize network exposure for all medical devices and/or systems. Place medical devices behind firewalls and isolate them where possible. Restrict system access to authorized personnel only and follow the principle of least privilege. Implement a defense-in-depth strategy. Disable any unnecessary accounts, protocols, and services. For further information, refer to the FDA’s existing guidance on medical device cybersecurity.

Goal Reached Thanks to every supporter — we hit 100%!

Medtronic Valleylab FT10/FX8 Hardcoded Credentials & RCE Vulnerabilities (CVE-2019-3593/3530)

More from this source