What’s Vulnerable › Vulnerabilities

CVE-2021-31562: Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-01-21 · updated 2026-06-17
• Weakness: CWE-327

Description

The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways. An attacker may be able to eavesdrop on transferred data, manipulate data allegedly secured by SSL/TLS, and impersonate an entity to gain access to sensitive information.

Affected products

• Fresenius-Kabi Agilia Connect Firmware: through d25
• Fresenius-Kabi Agilia Link+ Firmware: before 3.0; 3.0, 3.0-d15 — fixed in 3.0
• Fresenius-Kabi Agilia Partner Maintenance Software: through 3.3.0
• Fresenius-Kabi Vigilant Centerium: 1.0
• Fresenius-Kabi Vigilant Insight: 1.0
• Fresenius-Kabi Vigilant Mastermed: 1.0

How to fix

Upgrade to a fixed version: Fresenius-Kabi Agilia Link+ Firmware 3.0. Check the vendor advisory for mitigations.

References

• https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
• https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01

Get alerted when CVE-2021-31562 or the next vulnerability affects your stack