Information disclosure in Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard)
CVE-2021-23195
Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 has the option for automated indexing (directory listing) activated. When accessing a directory, a web server delivers its entire content in HTML form. If an index file does not exist and directory listing is enabled, all content of the directory will be displayed, allowing an attacker to identify and access files on the server.
EPSS: 0.008 (55.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) — versions unspecified
- Fresenius-kabi Agilia_connect
- Fresenius-kabi Agilia_connect_firmware
- Fresenius-kabi Agilia_partner_maintenance_software
- Fresenius-kabi Link\+_agilia
- Fresenius-kabi Link\+_agilia_firmware — versions 3.0
- Fresenius-kabi Vigilant_centerium — versions 1.0
- Fresenius-kabi Vigilant_insight — versions 1.0
- Fresenius-kabi Vigilant_mastermed — versions 1.0
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-23195?
- CVE-2021-23195 is a medium-severity vulnerability in Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard), classified under CWE-548. CVSS score: 5.3/10. Published 2022-01-21.
- How severe is CVE-2021-23195?
- Medium severity. CVSS v3 base score is 5.3 out of 10.