CVE-2021-23195 — Fresenius Kabi Agilia Connect Infusion System exposure of information through directory listing

CVE-2021-23195

Fresenius Kabi Agilia Connect Infusion System exposure of information through directory listing PUBLISHED

Description (CNA)

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 has the option for automated indexing (directory listing) activated. When accessing a directory, a web server delivers its entire content in HTML form. If an index file does not exist and directory listing is enabled, all content of the directory will be displayed, allowing an attacker to identify and access files on the server.

Affected (CNA)

Vendor / product	Versions
Fresenius Kabi / Vigilant Software Suite (Mastermed Dashboard)	affected unspecified before 2.0.1.3

CWE

CWE-548

References

https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01

CISA-ADP

No English description supplied.

No references supplied.