Vulnerability in Fresenius Kabi Agilia Partner
CVE-2021-23207
An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for the Fresenius Kabi Vigilant MasterMed version 2.0.1.3 application and impersonate arbitrary users. An attacker could man…
EPSS: 0.002 (12.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N.
Affected products
- Fresenius Kabi Agilia Partner — versions unspecified
- Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) — versions unspecified
- Fresenius-kabi Agilia_connect
- Fresenius-kabi Agilia_partner_maintenance_software
- Fresenius-kabi Link\+_agilia
- Fresenius-kabi Link\+_agilia_firmware — versions 3.0
- Fresenius-kabi Vigilant_centerium — versions 1.0
- Fresenius-kabi Vigilant_insight — versions 1.0
- Fresenius-kabi Vigilant_mastermed — versions 1.0
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-23207?
- CVE-2021-23207 is a medium-severity vulnerability in Fresenius Kabi Agilia Partner, classified under Plaintext Storage of a Password. CVSS score: 6.5/10. Published 2022-01-21.
- How severe is CVE-2021-23207?
- Medium severity. CVSS v3 base score is 6.5 out of 10.