Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2021-23207
Analyzed
More InfoOfficial Page
Source-ics-cert@hq.dhs.gov
View Known Exploited Vulnerability (KEV) details
Published At-21 Jan, 2022 | 19:15
Updated At-30 Aug, 2022 | 16:08

An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for the Fresenius Kabi Vigilant MasterMed version 2.0.1.3 application and impersonate arbitrary users. An attacker could manipulate RabbitMQ queues and messages by impersonating users.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.15.5MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Secondary3.16.5MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Primary2.02.1LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
CPE Matches
fresenius-kabi
fresenius-kabi
>>agilia_connect>>Versions up to d25(inclusive)
cpe:2.3:o:fresenius-kabi:agilia_connect:*:*:*:*:*:*:*:*
fresenius-kabi
fresenius-kabi
>>agilia_connect>>-
cpe:2.3:h:fresenius-kabi:agilia_connect:-:*:*:*:*:*:*:*
fresenius-kabi
fresenius-kabi
>>agilia_partner_maintenance_software>>Versions up to 3.3.0(inclusive)
cpe:2.3:a:fresenius-kabi:agilia_partner_maintenance_software:*:*:*:*:*:*:*:*
fresenius-kabi
fresenius-kabi
>>vigilant_centerium>>1.0
cpe:2.3:a:fresenius-kabi:vigilant_centerium:1.0:*:*:*:*:*:*:*
fresenius-kabi
fresenius-kabi
>>vigilant_insight>>1.0
cpe:2.3:a:fresenius-kabi:vigilant_insight:1.0:*:*:*:*:*:*:*
fresenius-kabi
fresenius-kabi
>>vigilant_mastermed>>1.0
cpe:2.3:a:fresenius-kabi:vigilant_mastermed:1.0:*:*:*:*:*:*:*
fresenius-kabi
fresenius-kabi
>>link\+_agilia_firmware>>Versions before 3.0(exclusive)
cpe:2.3:o:fresenius-kabi:link\+_agilia_firmware:*:*:*:*:*:*:*:*
fresenius-kabi
fresenius-kabi
>>link\+_agilia_firmware>>3.0
cpe:2.3:o:fresenius-kabi:link\+_agilia_firmware:3.0:-:*:*:*:*:*:*
fresenius-kabi
fresenius-kabi
>>link\+_agilia_firmware>>3.0
cpe:2.3:o:fresenius-kabi:link\+_agilia_firmware:3.0:d15:*:*:*:*:*:*
fresenius-kabi
fresenius-kabi
>>link\+_agilia>>-
cpe:2.3:h:fresenius-kabi:link\+_agilia:-:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-522Primarynvd@nist.gov
CWE-256Secondaryics-cert@hq.dhs.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01ics-cert@hq.dhs.gov
Third Party Advisory
US Government Resource
Change History
0Changes found
Details not found