5.3

CVE-2021-23195

Fresenius Kabi Agilia Connect Infusion System exposure of information through directory listing

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 has the option for automated indexing (directory listing) activated. When accessing a directory, a web server delivers its entire content in HTML form. If an index file does not exist and directory listing is enabled, all content of the directory will be displayed, allowing an attacker to identify and access files on the server.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fresenius-kabi ≫ Link+ Agilia Firmware Version < 3.0
   Fresenius-kabi ≫ Link+ Agilia Version-
Fresenius-kabi ≫ Link+ Agilia Firmware Version3.0 Update-
   Fresenius-kabi ≫ Link+ Agilia Version-
Fresenius-kabi ≫ Link+ Agilia Firmware Version3.0 Updated15
   Fresenius-kabi ≫ Link+ Agilia Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.85% 0.532
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
DHS.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CWE-548 Exposure of Information Through Directory Listing

The product inappropriately exposes a directory listing with an index of all the resources located inside of the directory.

https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
Third Party Advisory
US Government Resource