CVE-2021-33846: falha de média gravidade em Fresenius Kabi Vigilant Software Suite…
Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.3%
Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 issues authentication tokens to authenticated users that are signed with a symmetric encryption key. An attacker in possession of the key can issue valid JWTs and impersonate arbitrary users.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
Fresenius Kabi · Vigilant Software Suite (Mastermed Dashboard)CVEs relacionadas — Fresenius Kabi Vigilant Software Suite…
No mesmo produto, das mais perigosas para as menos.
CVE-2021-43355HIGHFresenius Kabi Agilia Connect Infusion System use of client side authenticationEPSS 1.0%CVE-2021-23195MEDIUMFresenius Kabi Agilia Connect Infusion System exposure of information through directory listingEPSS 0.8%CVE-2021-44464MEDIUMFresenius Kabi Agilia Connect Infusion System hard coded credentialsEPSS 0.6%CVE-2021-33848MEDIUMFresenius Kabi Agilia Connect Infusion System cross site scriptingEPSS 0.6%CVE-2021-23207MEDIUMFresenius Kabi Agilia Connect Infusion System plaintext storage of a passwordEPSS 0.2%