Vulnerability

Fresenius Kabi Agilia Connect infusion accessories expose unauthenticated endpoints and weak TLS

MedDevice Cyber Staff · Dec 21 · 4 min read · Via CISA ICSMA-21-355-01

CISA published advisory ICSMA-21-355-01 on December 21, 2021, for the Fresenius Kabi Agilia Connect infusion system. Researchers at ERNW (Julian Suleder, Nils Emmerich, Raphael Pavlidis and Dr. Oliver Matula) reported 13 vulnerabilities. Affected are the Agilia Connect WiFi module of the pumps up to D25, Agilia Link+ up to 3.0 D15, and Agilia Partner maintenance software up to 3.3.0, along with Vigilant server applications.

The highest score is CVSS v3 7.5 for CVE-2021-23236: requests can interrupt Agilia Link+, which then needs a hard reset by pressing a button on the rack. CVE-2021-23233 (CVSS 7.3) is worse in practice. Sensitive endpoints on Link+ accept requests with no authentication, so an unauthenticated attacker can perform critical actions or change critical configuration.

Authentication on Link+ is weak throughout. CVE-2021-23196 notes that the web application handles authentication and session management only on the client side. CVE-2021-41835 says the management interface serves plain HTTP on TCP/80 without redirecting to the TLS service on TCP/443, and CVE-2021-31562 describes an SSL/TLS configuration with serious deficiencies.

The pump side has its own gap. CVE-2021-33843 (CVSS 5.3) is a default configuration page on the Agilia SP MC WiFi module, reachable without authentication, that can change network settings.

The Vigilant server software adds six more. MasterMed contains service credentials likely common to every installation (CVE-2021-44464), signs JWTs with a symmetric key (CVE-2021-33846), validates login input only on the client (CVE-2021-43355) and keeps secrets in the registry that let an attacker with host access mint tokens (CVE-2021-23207). Centerium Dashboard has reflected cross-site scripting (CVE-2021-33848), and the Vigilant API has directory listing switched on (CVE-2021-23195). CVE-2020-35340 flags outdated ExpertPdf and lighttpd components.

Fresenius Kabi shipped Link+ v3.0 (D16 or later), VSS v1.0.3, the pump WiFi module at D29 or later and Agilia Connect Partner v3.3.2, and began telling users about them in April 2021. About 1,200 early Link+ units need a hardware change before they can run D16, and until they are replaced Fresenius Kabi points users to CISA's network defense recommendations.

None of the 13 touch the pump's delivery logic, yet Link+ is the network path to the pumps. Server-side authentication on the rack is the control that has to exist.

Are you a representative of Fresenius Kabi? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

Update Agilia Link+ to v3.0 D16 or later, the pump WiFi modules to D29 or later, Agilia Connect Partner to v3.3.2 or later and VSS to v1.0.3 or later. Early Link+ units that cannot take D16 need replacement; until then, isolate them following CISA's recommendations. Block plain HTTP to Link+ and restrict its management interface to biomed hosts.

Apply the Fresenius Kabi versions. Move Link+ to v3.0 D16, WiFi modules to D29, Partner to v3.3.2 and VSS to v1.0.3 or later.
Replace early Link+ hardware. Identify the early Link+ units that need a hardware change and schedule replacements with Fresenius Kabi.
Isolate the infusion network. Keep Link+ racks and Vigilant servers behind firewalls, with TCP/80 blocked and the management interface limited to biomed hosts.
Enforce auth on the server. Every sensitive endpoint on an infusion accessory must check the session on the device, never only in the browser.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure. The named product rows list what the sources state about the affected product.

Required

Web interface

Contributing

Wireless connectivity Therapy delivery Hospital network User accounts

Agilia Link+

PID-311 PID-331 PID-4112 Web interface

Agilia Connect WiFi module

PID-331 Wireless connectivity

Vigilant MasterMed

PID-3322 User accounts

Fix the class in your product

The login worked; the authorization did not follow through on every object the request names. As the maker, authorize every object reference on the server against the caller, return uniform responses so nothing can be enumerated, and strip internal detail from what the backend returns.

Authorize per object. Check on the server that the caller may see the specific record a request names, on every request.
Answer uniformly. Login and lookup respond identically for present and absent accounts.
Return generic errors. Log detail server-side; never leak internal state to the client.

Mapped EMB3D mitigations

Questions & Answers

Which Agilia Link+ version fixes the Fresenius Kabi vulnerabilities in ICSMA-21-355-01?

Fresenius Kabi fixed the Agilia Link+ vulnerabilities, including CVE-2021-23233 and CVE-2021-23236, in Link+ v3.0 D16 or later, per CISA advisory ICSMA-21-355-01 of December 21, 2021. The pump WiFi module fix is D29 or later, Agilia Connect Partner is v3.3.2, and VSS is v1.0.3. About 1,200 early Link+ units need a hardware change to run D16.

What is CVE-2021-23233 in Fresenius Kabi Agilia Link+?

CVE-2021-23233 (CWE-284, CVSS v3 7.3) lets an unauthenticated attacker send requests to sensitive Agilia Link+ endpoints, up to 3.0 D15, to perform critical actions or modify critical configuration. CISA disclosed it in advisory ICSMA-21-355-01.

Who found the Fresenius Kabi Agilia Connect vulnerabilities?

Julian Suleder, Nils Emmerich, Raphael Pavlidis and Dr. Oliver Matula of ERNW reported the 13 Agilia Connect vulnerabilities listed in CISA advisory ICSMA-21-355-01.

← Back to Vulnerabilities