SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-23233

An attacker can send requests to sensitive endpoints as an unauthenticated user to perform critical actions or modify critical configuration parameters.

CRITICAL 9.8EPSS 0.95%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.95%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Sensitive endpoints in Fresenius Kabi Agilia Link+ v3.0 and prior can be accessed without any authentication information such as the session cookie. An attacker can send requests to sensitive endpoints as an unauthenticated user to perform critical actions or modify critical configuration parameters.

CVSS 3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.95% probability · 59th percentile
CISA KEV
Not listed
Weakness
CWE-284, CWE-798
Affected
fresenius-kabi/agilia partner maintenance software · fresenius-kabi/vigilant centerium · fresenius-kabi/vigilant insight · fresenius-kabi/vigilant mastermed · fresenius-kabi/agilia connect firmware · fresenius-kabi/link\+ agilia firmware
Source
ics-cert@hq.dhs.gov

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.