Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2021-41835

Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Fresenius Kabi Agilia Link + version 3.0 does not enforce transport layer encryption. Therefore, transmitted data may be sent in cleartext. Transport layer encryption is offered on Port TCP/443, but the affected service does not perform an automated redirect from the unencrypted service on Port TCP/80 to the encrypted service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fresenius Kabi Agilia Link+

  • unspecified to < 3.0affected

References