TI-2021-18458 CVE-2021-41835 · GHSA-42g4-xc42-5fr4
Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
Priority LOW 39
Fresenius Kabi Agilia Link + version 3.0 does not enforce transport layer encryption.
Vulnerabilities
5 records
TI-2021-11677 CVE-2021-31562 · GHSA-vx8c-ppgj-6wg7
Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
Priority MEDIUM 46
The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways.
TI-2021-05987 CVE-2021-23233 · GHSA-2vv3-q2gp-2rjv
Fresenius Kabi Agilia Connect Infusion System
Priority MEDIUM 50
Sensitive endpoints in Fresenius Kabi Agilia Link+ v3.0 and prior can be accessed without any authentication information such as the session cookie.
TI-2021-05964 CVE-2021-23196 · GHSA-3926-52rm-j54q
Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials
Priority MEDIUM 50
The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently.
TI-2021-05988 CVE-2021-23236 · GHSA-6v7x-jpwr-grh2
Fresenius Kabi Agilia Connect Infusion System uncontrolled resource consumption
Priority MEDIUM 41
Requests may be used to interrupt the normal operation of the device.