Lucene search

IcscertCVE-2021-31562

HistoryJan 21, 2022 - 7:15 p.m.

CVE-2021-31562

2022-01-2119:15:08

CWE-327

icscert

web.nvd.nist.gov

fresenius kabi agilia link

ssl/tls

vulnerabilities

cve-2021-31562

cybersecurity

nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

50.8%

JSON

The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways. An attacker may be able to eavesdrop on transferred data, manipulate data allegedly secured by SSL/TLS, and impersonate an entity to gain access to sensitive information.

Affected configurations

Nvd

Node

fresenius-kabiagilia_connect_firmwareRange≤d25

AND

fresenius-kabiagilia_connectMatch-

Node

fresenius-kabiagilia_partner_maintenance_softwareRange≤3.3.0

fresenius-kabivigilant_centeriumMatch1.0

fresenius-kabivigilant_insightMatch1.0

fresenius-kabivigilant_mastermedMatch1.0

Node

fresenius-kabiagilia_link\+_firmwareRange<3.0

fresenius-kabiagilia_link\+_firmwareMatch3.0-

fresenius-kabiagilia_link\+_firmwareMatch3.0d15

AND

fresenius-kabiagilia_link\+Match-

VendorProductVersionCPE
fresenius-kabiagilia_connect_firmware*cpe:2.3:o:fresenius-kabi:agilia_connect_firmware:*:*:*:*:*:*:*:*
fresenius-kabiagilia_connect-cpe:2.3:h:fresenius-kabi:agilia_connect:-:*:*:*:*:*:*:*
fresenius-kabiagilia_partner_maintenance_software*cpe:2.3:a:fresenius-kabi:agilia_partner_maintenance_software:*:*:*:*:*:*:*:*
fresenius-kabivigilant_centerium1.0cpe:2.3:a:fresenius-kabi:vigilant_centerium:1.0:*:*:*:*:*:*:*
fresenius-kabivigilant_insight1.0cpe:2.3:a:fresenius-kabi:vigilant_insight:1.0:*:*:*:*:*:*:*
fresenius-kabivigilant_mastermed1.0cpe:2.3:a:fresenius-kabi:vigilant_mastermed:1.0:*:*:*:*:*:*:*
fresenius-kabiagilia_link\+_firmware*cpe:2.3:o:fresenius-kabi:agilia_link\+_firmware:*:*:*:*:*:*:*:*
fresenius-kabiagilia_link\+_firmware3.0cpe:2.3:o:fresenius-kabi:agilia_link\+_firmware:3.0:-:*:*:*:*:*:*
fresenius-kabiagilia_link\+_firmware3.0cpe:2.3:o:fresenius-kabi:agilia_link\+_firmware:3.0:d15:*:*:*:*:*:*
fresenius-kabiagilia_link\+-cpe:2.3:h:fresenius-kabi:agilia_link\+:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fresenius-kabi	agilia_connect_firmware	*	cpe:2.3:o:fresenius-kabi:agilia_connect_firmware::::::::
fresenius-kabi	agilia_connect	-	cpe:2.3:h:fresenius-kabi:agilia_connect:-:::::::*
fresenius-kabi	agilia_partner_maintenance_software	*	cpe:2.3:a:fresenius-kabi:agilia_partner_maintenance_software::::::::
fresenius-kabi	vigilant_centerium	1.0	cpe:2.3:a:fresenius-kabi:vigilant_centerium:1.0:::::::*
fresenius-kabi	vigilant_insight	1.0	cpe:2.3:a:fresenius-kabi:vigilant_insight:1.0:::::::*
fresenius-kabi	vigilant_mastermed	1.0	cpe:2.3:a:fresenius-kabi:vigilant_mastermed:1.0:::::::*
fresenius-kabi	agilia_link\+_firmware	*	cpe:2.3:o:fresenius-kabi:agilia_link\+_firmware::::::::
fresenius-kabi	agilia_link\+_firmware	3.0	cpe:2.3:o:fresenius-kabi:agilia_link\+_firmware:3.0:-::::::
fresenius-kabi	agilia_link\+_firmware	3.0	cpe:2.3:o:fresenius-kabi:agilia_link\+_firmware:3.0:d15::::::
fresenius-kabi	agilia_link\+	-	cpe:2.3:h:fresenius-kabi:agilia_link\+:-:::::::*

CNA Affected

[
  {
    "product": "Agilia Link+",
    "vendor": "Fresenius Kabi",
    "versions": [
      {
        "lessThan": "3.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.cisa.gov/uscert/ics/advisories/icsma-21-355-01

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

50.8%

JSON

Related for CVE-2021-31562