Back to Database
Status published
Medium
CVE-2021-33843
Fresenius Kabi Agilia Connect Infusion System files or directories accessible to external parties
Vulnerability Description
Fresenius Kabi Agilia SP MC WiFi vD25 and prior has a default configuration page accessible without authentication. An attacker may use this functionality to change the exposed configuration values such as network settings.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-33843
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Julian Suleder (ERNW Research GmbH), Nils Emmerich (ERNW Research GmbH), Raphael Pavlidis (ERNW Research GmbH), and Dr. Oliver Matula (ERNW Enno Rey Netzwerke GmbH) reported these vulnerabilities to the German Federal Office for Information Security (BSI) in the context of the BSI project ManiMed (Medical Device Manipulation Project).
More from Fresenius Kabi
View All →CVE-2021-44464
Fresenius Kabi Agilia Connect Infusion System hard coded credentials
Medium
6.3
CVE-2021-43355
Fresenius Kabi Agilia Connect Infusion System use of client side authentication
High
7.3
CVE-2021-41835
Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
High
7.3
CVE-2021-33848
Fresenius Kabi Agilia Connect Infusion System cross site scripting
Medium
5.4
CVE-2021-33846
Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
Medium
5.9
Affected Vendor
Fresenius Kabi
View all reports →Affected Software
Agilia Connect WiFi
Vulnerable Versions:
unspecified
Timeline
Official Publish:
January 21st, 2022
Last Modified:
April 16th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N