Fresenius-kabi Link+ Agilia Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Fresenius-kabi Link+ Agilia Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2021-23236 — CVSS 7.5 (high): Requests may be used to interrupt the normal operation of the device. When exploited, Fresenius Kabi Agilia Link+ version 3.0 must be…
• CVE-2021-23196 — CVSS 7.3 (high): The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side…
• CVE-2021-41835 — CVSS 7.3 (high): Fresenius Kabi Agilia Link + version 3.0 does not enforce transport layer encryption. Therefore, transmitted data may be sent in cleartext…
• CVE-2021-23233 — CVSS 7.3 (high): Sensitive endpoints in Fresenius Kabi Agilia Link+ v3.0 and prior can be accessed without any authentication information such as the…
• CVE-2021-43355 — CVSS 7.3 (high): Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 allows user input to be validated on the client side without…
• CVE-2021-23207 — CVSS 6.5 (medium): An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for the Fresenius Kabi…
• CVE-2021-44464 — CVSS 6.3 (medium): Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances. An…
• CVE-2021-33846 — CVSS 5.9 (medium): Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 issues authentication tokens to authenticated users that are…
• CVE-2021-33848 — CVSS 5.4 (medium): Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 is vulnerable to reflected cross-site scripting attacks. An…
• CVE-2021-23195 — CVSS 5.3 (medium): Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 has the option for automated indexing (directory listing)…