Fresenius Kabi

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Fresenius Kabi records in CISA KEV

No Fresenius Kabi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Agilia Partner Maintenance Software 11 records MEDIUM Vigilant Centerium 11 records MEDIUM Vigilant Insight 11 records MEDIUM Vigilant Mastermed 11 records MEDIUM Link+ Agilia Firmware 10 records MEDIUM Agilia Connect Firmware 9 records MEDIUM Agilia Connect 2 records LOW Agilia Link+ Firmware 1 record MEDIUM

Records

2 records in Agilia Connect · all components

TI-2021-18458 CVE-2021-41835 · GHSA-42g4-xc42-5fr4

Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm

LOW 39

Fresenius Kabi Agilia Link + version 3.0 does not enforce transport layer encryption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00305 Published 2022-01-21 Fixed in 3.0 CWE-327

TI-2021-05972 CVE-2021-23207 · GHSA-4r23-36c8-4wg2

Fresenius Kabi Agilia Connect Infusion System plaintext storage of a password

LOW 28

An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for the Fresenius Kabi Vigilant MasterMed version 2.0.1.3 application and impersonate arbitrary users.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00218 Published 2022-01-21 Fixed in 2.0.1.3, 3.0 CWE-256

Open these records in search →

Critical	5
High	4
Medium	4
Low	0
No CVSS	0