CVE-2021-31562 Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm

Medium 6.5 Published 21 Jan 2022 Updated 16 Apr 2025

Deficient SSL/TLS configuration in Fresenius Kabi Agilia Link+ allows attackers to eavesdrop, manipulate data, and impersonate entities.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-31562?

CVE-2021-31562 is a medium-severity vulnerability in Fresenius Kabi Agilia Link+, published on 21 Jan 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways. An attacker may be able to eavesdrop on transferred data, manipulate data allegedly secured by SSL/TLS, and impersonate an entity to gain access to sensitive information.

Weakness: CWE-327

Which versions are affected by CVE-2021-31562?

It affects 6 products.

Products include Fresenius-Kabi Agilia Connect Firmware, Fresenius-Kabi Agilia Link\+ Firmware, Fresenius-Kabi Agilia Partner Maintenance Software, Fresenius-Kabi Vigilant Centerium, Fresenius-Kabi Vigilant Insight, Fresenius-Kabi Vigilant Mastermed.

How do I fix CVE-2021-31562?

No fix has been published for CVE-2021-31562 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-31562 being exploited?

There is no known exploitation of CVE-2021-31562 in the wild and no public exploit code.

Sources

Also known as GHSA-vx8c-ppgj-6wg7.