Back to Database
Status published
High
CVE-2021-23196
Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials
Vulnerability Description
The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-23196
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Julian Suleder (ERNW Research GmbH), Nils Emmerich (ERNW Research GmbH), Raphael Pavlidis (ERNW Research GmbH), and Dr. Oliver Matula (ERNW Enno Rey Netzwerke GmbH) reported these vulnerabilities to the German Federal Office for Information Security (BSI) in the context of the BSI project ManiMed (Medical Device Manipulation Project).
More from Fresenius Kabi
View All →CVE-2021-44464
Fresenius Kabi Agilia Connect Infusion System hard coded credentials
Medium
6.3
CVE-2021-43355
Fresenius Kabi Agilia Connect Infusion System use of client side authentication
High
7.3
CVE-2021-41835
Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
High
7.3
CVE-2021-33848
Fresenius Kabi Agilia Connect Infusion System cross site scripting
Medium
5.4
CVE-2021-33846
Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
Medium
5.9
Affected Vendor
Fresenius Kabi
View all reports →Affected Software
Agilia Link+
Vulnerable Versions:
unspecified
Timeline
Official Publish:
January 21st, 2022
Last Modified:
April 16th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L