Fresenius Kabi

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Fresenius Kabi records in CISA KEV

No Fresenius Kabi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Agilia Partner Maintenance Software 11 records MEDIUM Vigilant Centerium 11 records MEDIUM Vigilant Insight 11 records MEDIUM Vigilant Mastermed 11 records MEDIUM Link+ Agilia Firmware 10 records MEDIUM Agilia Connect Firmware 9 records MEDIUM Agilia Connect 2 records LOW Agilia Link+ Firmware 1 record MEDIUM

Records

9 records in Agilia Connect Firmware · all components

TI-2021-19327 CVE-2021-43355 · GHSA-gc9x-xj3h-72v9

Fresenius Kabi Agilia Connect Infusion System use of client side authentication

MEDIUM 50

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 allows user input to be validated on the client side without authentication by the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00978 Published 2022-01-21 Fixed in 2.0.1.3 CWE-603

TI-2021-05987 CVE-2021-23233 · GHSA-2vv3-q2gp-2rjv

Fresenius Kabi Agilia Connect Infusion System

MEDIUM 50

Sensitive endpoints in Fresenius Kabi Agilia Link+ v3.0 and prior can be accessed without any authentication information such as the session cookie.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00945 Published 2022-01-21 Fixed in 3.0 CWE-284

TI-2021-05964 CVE-2021-23196 · GHSA-3926-52rm-j54q

Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials

MEDIUM 50

The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00909 Published 2022-01-21 Fixed in 3.0 CWE-522

TI-2021-11677 CVE-2021-31562 · GHSA-vx8c-ppgj-6wg7

Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm

MEDIUM 46

The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00488 Published 2022-01-21 Fixed in 3.0 CWE-327

TI-2021-05988 CVE-2021-23236 · GHSA-6v7x-jpwr-grh2

Fresenius Kabi Agilia Connect Infusion System uncontrolled resource consumption

MEDIUM 41

Requests may be used to interrupt the normal operation of the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0107 Published 2022-01-21 Fixed in 3.0 CWE-400

TI-2021-20073 CVE-2021-44464 · GHSA-jpmr-g8fr-7x23

Fresenius Kabi Agilia Connect Infusion System hard coded credentials

LOW 39

Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0064 Published 2022-01-21 Fixed in 2.0.1.3 CWE-798

TI-2021-13191 CVE-2021-33846 · GHSA-vvwm-gcgm-h9j6

Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm

LOW 33

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 issues authentication tokens to authenticated users that are signed with a symmetric encryption key.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00313 Published 2022-01-21 Fixed in 2.0.1.3 CWE-327

TI-2021-05963 CVE-2021-23195 · GHSA-29g2-4fxx-7xmh

Fresenius Kabi Agilia Connect Infusion System exposure of information through directory listing

LOW 32

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 has the option for automated indexing (directory listing) activated.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00845 Published 2022-01-21 Fixed in 2.0.1.3 CWE-548

TI-2021-13193 CVE-2021-33848 · GHSA-3r3c-xv8w-hfp3

Fresenius Kabi Agilia Connect Infusion System cross site scripting

LOW 28

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 is vulnerable to reflected cross-site scripting attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00611 Published 2022-01-21 Fixed in 2.0.1.3 CWE-79

Open these records in search →

Critical	5
High	4
Medium	4
Low	0
No CVSS	0