CVE-2021-23196 — Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials

CVE-2021-23196

Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials PUBLISHED

Description (CNA)

The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently.

Affected (CNA)

Vendor / product	Versions
Fresenius Kabi / Agilia Link+	affected unspecified before 3.0

CWE

CWE-522

References

https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01

CISA-ADP

No English description supplied.

No references supplied.