Description
Fresenius Kabi Agilia Link + version 3.0 does not enforce transport layer encryption. Therefore, transmitted data may be sent in cleartext. Transport layer encryption is offered on Port TCP/443, but the affected service does not perform an automated redirect from the unencrypted service on Port TCP/80 to the encrypted service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fresenius Kabi | Agilia Link+ | unspecified – < 3.0 | 3.0 |
Advisories 1
- ICSMA-21-355-01 Fresenius Kabi Agilia Connect Infusion System (Update A) CISA ICS & IT advisories · Jan 27, 2022