CVE-2021-31562 — Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm

CVE-2021-31562

Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm PUBLISHED

Description (CNA)

The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways. An attacker may be able to eavesdrop on transferred data, manipulate data allegedly secured by SSL/TLS, and impersonate an entity to gain access to sensitive information.

Affected (CNA)

Vendor / product	Versions
Fresenius Kabi / Agilia Link+	affected unspecified before 3.0

CWE

CWE-327

References

https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01

CISA-ADP

No English description supplied.

No references supplied.