Description
The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fresenius Kabi | Agilia Link+ | unspecified – < 3.0 | 3.0 |
Advisories 1
- ICSMA-21-355-01 Fresenius Kabi Agilia Connect Infusion System (Update A) CISA ICS & IT advisories · Jan 27, 2022