CVE-2021-44464: medium-severity vulnerability in Fresenius Kabi Vigilant Software Suite…
Fresenius Kabi Agilia Connect Infusion System hard coded credentials
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.3epss 0.6%
Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances. An attacker in possession of the password may gain privileges on all installations of this software.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
Fresenius Kabi · Vigilant Software Suite (Mastermed Dashboard)Related CVEs — Fresenius Kabi Vigilant Software Suite…
In the same product, most dangerous first.
CVE-2021-43355HIGHFresenius Kabi Agilia Connect Infusion System use of client side authenticationEPSS 1.0%CVE-2021-23195MEDIUMFresenius Kabi Agilia Connect Infusion System exposure of information through directory listingEPSS 0.8%CVE-2021-33848MEDIUMFresenius Kabi Agilia Connect Infusion System cross site scriptingEPSS 0.6%CVE-2021-33846MEDIUMFresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithmEPSS 0.3%CVE-2021-23207MEDIUMFresenius Kabi Agilia Connect Infusion System plaintext storage of a passwordEPSS 0.2%