CVE-2021-23196 Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials

High 7.3 Published 21 Jan 2022 Updated 16 Apr 2025

Attackers can bypass authentication on the Agilia Link+ web interface due to client-side only security controls, potentially gaining unauthorized access.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-23196?

CVE-2021-23196 is a high-severity authentication bypass vulnerability in Fresenius Kabi Agilia Link+, published on 21 Jan 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently.

Weakness: CWE-287, CWE-522

Which versions are affected by CVE-2021-23196?

It affects 6 products.

Products include Fresenius-Kabi Agilia Connect Firmware, Fresenius-Kabi Agilia Partner Maintenance Software, Fresenius-Kabi Link\+ Agilia Firmware, Fresenius-Kabi Vigilant Centerium, Fresenius-Kabi Vigilant Insight, Fresenius-Kabi Vigilant Mastermed.

How do I fix CVE-2021-23196?

No fix has been published for CVE-2021-23196 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2021-23196 being exploited?

There is no known exploitation of CVE-2021-23196 in the wild and no public exploit code.

Sources

Also known as GHSA-3926-52rm-j54q.