Approved changes feed: RSS · Atom

cpe:2.3:o:fresenius-kabi:agilia_connect:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorFresenius Kabi (d62d9629-2181-5d09-b821-51fa01442b94)
ProductAgilia Connect (f8908d5f-f814-5e23-adf4-3d9150fc610b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-41835 vulnerable 2026-06-03 14:45:26.312630 Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
HIGH (7.3)
Fresenius Kabi Agilia Link + version 3.0 does not enforce transport layer encryption. Therefore, transmitted data may be sent in cleartext. Transport layer encryption is offered on Port TCP/443, but the affected service does not perform an automated redirect from the unencrypted service on Port TCP/80 to the encrypted service.
Published: 2022-01-21T18:17:44.000Z
Updated: 2025-04-16T16:46:42.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23207 vulnerable 2026-06-03 14:43:54.830380 Fresenius Kabi Agilia Connect Infusion System plaintext storage of a password
MEDIUM (6.5)
An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for the Fresenius Kabi Vigilant MasterMed version 2.0.1.3 application and impersonate arbitrary users. An attacker could manipulate RabbitMQ queues and messages by impersonating users.
Published: 2022-01-21T18:17:39.000Z
Updated: 2025-04-16T16:47:32.782Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.