Description
Fresenius Kabi Agilia SP MC WiFi vD25 and prior has a default configuration page accessible without authentication. An attacker may use this functionality to change the exposed configuration values such as network settings.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fresenius Kabi | Agilia Connect WiFi | unspecified – < D25 | D25 |
Advisories 1
- ICSMA-21-355-01 Fresenius Kabi Agilia Connect Infusion System (Update A) CISA ICS & IT advisories · Jan 27, 2022