CVE:CVE-2021-31562
CNNVD:CNNVD-202112-2151
Fresenius Kabi Agilia Connect Infusion System是德国Fresenius Kabi公司的一个输液系统。
Fresenius Kabi Agilia Connect Infusion System 存在加密问题漏洞，该漏洞源于Agilia Link+的SSL 、TLS配置存在严重缺陷，可能允许攻击者可利用该漏洞以不同的方式破坏SSL 、TLS会话。攻击者可利用该漏洞可能能够窃听传输的数据，操纵据称由SSL、TLS保护的数据，并假冒实体以获得对敏感信息的访问。
solution:Upgrade fresenius-kabi agilia_connect_firmware to a higher version than d25,and avoid the version (,d25]; Upgrade fresenius-kabi agilia_partner_maintenance_software to a higher version than 3.3.0,and avoid the version (,3.3.0]; Upgrade fresenius-kabi vigilant_centerium to a higher version than 1.0,and avoid the version 1.0; Upgrade fresenius-kabi vigilant_insight to a higher version than 1.0,and avoid the version 1.0; Upgrade fresenius-kabi vigilant_mastermed to a higher version than 1.0,and avoid the version 1.0; Upgrade fresenius-kabi agilia_link+_firmware to a higher version than 3.0,3.0,3.0:d15,and avoid the version (,3.0),3.0,3.0:d15