CVE-2021-31562

MEDIUM

Fresenius Kabi Agilia Link+ Firmware 3.0 - Use of a Broken or Risky Cryptographic Algorithm

Title source: llm
STIX 2.1

Description

The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways. An attacker may be able to eavesdrop on transferred data, manipulate data allegedly secured by SSL/TLS, and impersonate an entity to gain access to sensitive information.

References (1)

Core 1
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01

Scores

CVSS v3 6.5
EPSS 0.0049
EPSS Percentile 38.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-327
Status published
Products (7)
fresenius-kabi/agilia_connect_firmware < d25
fresenius-kabi/agilia_link\+_firmware 3.0 (2 CPE variants)
fresenius-kabi/agilia_link\+_firmware < 3.0
fresenius-kabi/agilia_partner_maintenance_software < 3.3.0
fresenius-kabi/vigilant_centerium 1.0
fresenius-kabi/vigilant_insight 1.0
fresenius-kabi/vigilant_mastermed 1.0
Published Jan 21, 2022
Tracked Since Feb 18, 2026