Lucene search

IcscertCVELIST:CVE-2021-44464

HistoryJan 21, 2022 - 6:17 p.m.

CVE-2021-44464 Fresenius Kabi Agilia Connect Infusion System hard coded credentials

2022-01-2118:17:42

CWE-798

icscert

www.cve.org

fresenius kabi

agilia connect

infusion system

vigilant software suite

mastermed dashboard

version 2.0.1.3

service credentials

common instances

attacker

password

gain privileges

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances. An attacker in possession of the password may gain privileges on all installations of this software.

CNA Affected

[
  {
    "product": "Vigilant Software Suite (Mastermed Dashboard)",
    "vendor": "Fresenius Kabi",
    "versions": [
      {
        "lessThan": "2.0.1.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.cisa.gov/uscert/ics/advisories/icsma-21-355-01