The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways. An attacker may be able to eavesdrop on transferred data, manipulate data allegedly secured by SSL/TLS, and impersonate an entity to gain access to sensitive information.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-31562
• https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01