medium6.5
CVE-2021-31562
The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in dif…
Impact
The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways. An attacker may be able to eavesdrop on transferred data, manipulate data allegedly secured by SSL/TLS, and impersonate an entity to gain access to sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fresenius-Kabi | Agilia Connect Firmware | through d25 |
| Fresenius-Kabi | Agilia Partner Maintenance Software | through 3.3.0 |
| Fresenius-Kabi | Vigilant Centerium | Version 1.0 |
| Fresenius-Kabi | Vigilant Insight | Version 1.0 |
| Fresenius-Kabi | Vigilant Mastermed | Version 1.0 |
| Fresenius-Kabi | Agilia Link\+ Firmware | before 3.0 Version 3.0 |