Agilia Link+
Approved changes feed: RSS · Atom
cpe:2.3:a:fresenius_kabi:agilia_link+:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fresenius Kabi (3bccb4e2-8874-5476-92ac-25e49cc76ff6) |
|---|---|
| Product | Agilia Link+ (76497586-3778-5df6-b251-93c732a46495) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-41835 |
vulnerable | 2026-06-08 05:35:21.137475 |
Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
HIGH (7.3)
Fresenius Kabi Agilia Link + version 3.0 does not enforce transport layer encryption. Therefore, transmitted data may be sent in cleartext. Transport layer encryption is offered on Port TCP/443, but the affected service does not perform an automated redirect from the unencrypted service on Port TCP/80 to the encrypted service.
Published: 2022-01-21T18:17:44.000Z
Updated: 2025-04-16T16:46:42.361Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31562 |
vulnerable | 2026-06-08 05:31:53.676827 |
Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
MEDIUM (6.5)
The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways. An attacker may be able to eavesdrop on transferred data, manipulate data allegedly secured by SSL/TLS, and impersonate an entity to gain access to sensitive information.
Published: 2022-01-21T18:17:40.000Z
Updated: 2025-04-16T16:47:21.698Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23236 |
vulnerable | 2026-06-08 05:30:02.542547 |
Fresenius Kabi Agilia Connect Infusion System uncontrolled resource consumption
HIGH (7.5)
Requests may be used to interrupt the normal operation of the device. When exploited, Fresenius Kabi Agilia Link+ version 3.0 must be rebooted via a hard reset triggered by pressing a button on the rack system.
Published: 2022-01-21T18:17:35.000Z
Updated: 2025-04-16T16:48:05.390Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23233 |
vulnerable | 2026-06-08 05:30:02.541615 |
Fresenius Kabi Agilia Connect Infusion System
HIGH (7.3)
Sensitive endpoints in Fresenius Kabi Agilia Link+ v3.0 and prior can be accessed without any authentication information such as the session cookie. An attacker can send requests to sensitive endpoints as an unauthenticated user to perform critical actions or modify critical configuration parameters.
Published: 2022-01-21T18:17:37.000Z
Updated: 2025-04-16T16:47:50.571Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23196 |
vulnerable | 2026-06-08 05:30:02.404533 |
Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials
HIGH (7.3)
The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently.
Published: 2022-01-21T18:17:36.000Z
Updated: 2025-04-16T16:47:57.851Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.