CVE:CVE-2019-13543
CNNVD:CNNVD-201911-441
Medtronic Valleylab Exchange Client 3.4及之前版本、Valleylab FT10 Energy Platform (VLFT10GEN) 4.0.0及之前版本和Valleylab FX8 Energy Platform (VLFX8GEN) 1.1.0及之前版本中存在信任管理问题漏洞，该漏洞源于程序使用多组硬编码凭据。攻击者可借助特制请求利用该漏洞读取设备上的文件。
solution:Upgrade medtronic valleylab_exchange_client to a higher version than 3.4,and avoid the version (,3.4]; Upgrade medtronic valleylab_ft10_energy_platform_firmware to a higher version than 4.0.0,and avoid the version (,4.0.0]; Upgrade medtronic valleylab_fx8_energy_platform_firmware to a higher version than 1.1.0,and avoid the version (,1.1.0]