Information disclosure

2022-01-2119:15:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.8%

JSON

The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways. An attacker may be able to eavesdrop on transferred data, manipulate data allegedly secured by SSL/TLS, and impersonate an entity to gain access to sensitive information.

CPENameOperatorVersion
agilia_connect_firmwareeq<= d25
agilia_link\\+_firmwarelt3.0
agilia_link\\+_firmwareeq3.0
agilia_link\\+_firmwareeq3.0 d15
agilia_partner_maintenance_softwarele3.3.0
vigilant_centeriumeq1.0
vigilant_insighteq1.0
vigilant_mastermedeq1.0

Name	Operator	Version
agilia_connect_firmware	eq	<= d25
agilia_link\\+_firmware	lt	3.0
agilia_link\\+_firmware	eq	3.0
agilia_link\\+_firmware	eq	3.0 d15
agilia_partner_maintenance_software	le	3.3.0
vigilant_centerium	eq	1.0
vigilant_insight	eq	1.0
vigilant_mastermed	eq	1.0

References

www.cisa.gov/uscert/ics/advisories/icsma-21-355-01