MEDIUM · 6.3

CVE-2021-44464

Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances. An attacker in possession of the password may gain privileges on al...

Vulnerability Description

Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances. An attacker in possession of the password may gain privileges on all installations of this software.

CVSS Score

6.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
Fresenius-KabiAgilia Connect Firmware<= d25
Fresenius-KabiAgilia Connect-
Fresenius-KabiAgilia Partner Maintenance Software<= 3.3.0
Fresenius-KabiVigilant Centerium1.0
Fresenius-KabiVigilant Insight1.0
Fresenius-KabiVigilant Mastermed1.0
Fresenius-KabiLink\+ Agilia Firmware< 3.0
Fresenius-KabiLink\+ Agilia-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2021-44464?

CVE-2021-44464 is a vulnerability with a CVSS score of 6.3 (MEDIUM). Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances. An attacker in possession of the password may gain privileges on al...

How severe is CVE-2021-44464?

CVE-2021-44464 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-44464?

Check the references section above for vendor advisories and patch information. Affected products include: Fresenius-Kabi Agilia Connect Firmware, Fresenius-Kabi Agilia Connect, Fresenius-Kabi Agilia Partner Maintenance Software, Fresenius-Kabi Vigilant Centerium, Fresenius-Kabi Vigilant Insight.