CVE-2021-23236
Summary
| CVE | CVE-2021-23236 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-01-21 19:15:00 UTC |
| Updated | 2022-01-28 16:13:00 UTC |
| Description | Requests may be used to interrupt the normal operation of the device. When exploited, Fresenius Kabi Agilia Link+ version 3.0 must be rebooted via a hard reset triggered by pressing a button on the rack system. |
Risk And Classification
Problem Types: CWE-400
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Fresenius-kabi | Agilia Connect | - | All | All | All |
| Operating System | Fresenius-kabi | Agilia Connect Firmware | All | All | All | All |
| Application | Fresenius-kabi | Agilia Partner Maintenance Software | All | All | All | All |
| Hardware | Fresenius-kabi | Link Agilia | - | All | All | All |
| Operating System | Fresenius-kabi | Link Agilia Firmware | All | All | All | All |
| Operating System | Fresenius-kabi | Link Agilia Firmware | 3.0 | - | All | All |
| Operating System | Fresenius-kabi | Link Agilia Firmware | 3.0 | d15 | All | All |
| Application | Fresenius-kabi | Vigilant Centerium | 1.0 | All | All | All |
| Application | Fresenius-kabi | Vigilant Insight | 1.0 | All | All | All |
| Application | Fresenius-kabi | Vigilant Mastermed | 1.0 | All | All | All |
| Application | Fresnius-kabi | Agilia Connect | All | All | All | All |
| Application | Fresnius-kabi | Agilia Link | All | All | All | All |
| Application | Fresnius-kabi | Agilia Link | 3.0 | d15 | All | All |
| Application | Fresnius-kabi | Agilia Partner Maintenance | All | All | All | All |
| Application | Fresnius-kabi | Vigilant Software Suite | 1.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Fresenius Kabi Agilia Connect Infusion System | CISA | MISC | www.cisa.gov | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Julian Suleder (ERNW Research GmbH), Nils Emmerich (ERNW Research GmbH), Raphael Pavlidis (ERNW Research GmbH), and Dr. Oliver Matula (ERNW Enno Rey Netzwerke GmbH) reported these vulnerabilities to the German Federal Office for Information Security (BSI) in the context of the BSI project ManiMed (Medical Device Manipulation Project).
There are currently no legacy QID mappings associated with this CVE.