← Database

CVE-2021-41835

HIGH CVSS: 7.3 Published: 2022-01-21 Modified: 2026-06-17

Description

Fresenius Kabi Agilia Link + version 3.0 does not enforce transport layer encryption. Therefore, transmitted data may be sent in cleartext. Transport layer encryption is offered on Port TCP/443, but the affected service does not perform an automated redirect from the unencrypted service on Port TCP/80 to the encrypted service.

Affected Platforms

Fresenius-Kabi Agilia Partner Maintenance SoftwareFresenius-Kabi Link\+ AgiliaFresenius-Kabi Vigilant InsightFresenius-Kabi Link\+ Agilia FirmwareFresenius-Kabi Vigilant CenteriumFresenius-Kabi Vigilant MastermedFresenius-Kabi Agilia Connect

Weakness Type

CWE-327, CWE-319

References