CVE-2021-31562: falha de média gravidade em Fresenius Kabi Agilia Link+
Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.5%
The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways. An attacker may be able to eavesdrop on transferred data, manipulate data allegedly secured by SSL/TLS, and impersonate an entity to gain access to sensitive information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
Fresenius Kabi · Agilia Link+CVEs relacionadas — Fresenius Kabi Agilia Link+
No mesmo produto, das mais perigosas para as menos.
CVE-2021-23236HIGHFresenius Kabi Agilia Connect Infusion System uncontrolled resource consumptionEPSS 1.1%CVE-2021-23233HIGHFresenius Kabi Agilia Connect Infusion System EPSS 0.9%CVE-2021-23196HIGHFresenius Kabi Agilia Connect Infusion System insufficiently protected credentialsEPSS 0.9%CVE-2021-41835HIGHFresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithmEPSS 0.3%