high7.5
CVE-2021-23236
Requests may be used to interrupt the normal operation of the device.
Impact
Requests may be used to interrupt the normal operation of the device. When exploited, Fresenius Kabi Agilia Link+ version 3.0 must be rebooted via a hard reset triggered by pressing a button on the rack system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fresenius-Kabi | Agilia Partner Maintenance Software | through 3.3.0 |
| Fresenius-Kabi | Vigilant Centerium | Version 1.0 |
| Fresenius-Kabi | Vigilant Insight | Version 1.0 |
| Fresenius-Kabi | Vigilant Mastermed | Version 1.0 |
| Fresenius-Kabi | Agilia Connect Firmware | through d25 |
| Fresenius-Kabi | Link\+ Agilia Firmware | before 3.0 Version 3.0 |