CVE-2021-33843 — Fresenius Kabi Agilia Connect Infusion System files or directories accessible to external parties

CVE-2021-33843

Fresenius Kabi Agilia Connect Infusion System files or directories accessible to external parties PUBLISHED

Description (CNA)

Fresenius Kabi Agilia SP MC WiFi vD25 and prior has a default configuration page accessible without authentication. An attacker may use this functionality to change the exposed configuration values such as network settings.

Affected (CNA)

Vendor / product	Versions
Fresenius Kabi / Agilia Connect WiFi	affected unspecified before D25

CWE

CWE-552

References

https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01

CISA-ADP

No English description supplied.

No references supplied.