{"id":"CVE-2021-44464","aliases":["EUVD-2021-31301","GHSA-jpmr-g8fr-7x23"],"status":"published","title":"Fresenius Kabi Agilia Connect Infusion System hard coded credentials","description":"Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances. An attacker in possession of the password may gain privileges on all installations of this software.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0064,"percentile":0.50988,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2022-01-21T18:17:42Z","modified":"2026-06-17T04:12:23Z","products":[{"vendor":"fresenius kabi","product":"vigilant software suite (mastermed dashboard)"},{"vendor":"fresenius-kabi","product":"agilia_connect_firmware"},{"vendor":"fresenius-kabi","product":"agilia_partner_maintenance_software"},{"vendor":"fresenius-kabi","product":"link\\+_agilia_firmware"},{"vendor":"fresenius-kabi","product":"vigilant_centerium"},{"vendor":"fresenius-kabi","product":"vigilant_insight"},{"vendor":"fresenius-kabi","product":"vigilant_mastermed"}],"references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44464"},{"url":"https://github.com/advisories/GHSA-jpmr-g8fr-7x23"}],"sources":{"cve":[{"id":"CVE-2021-44464","title":"Fresenius Kabi Agilia Connect Infusion System hard coded credentials","description":"Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances. An attacker in possession of the password may gain privileges on all installations of this software.","status":"published","published":"2022-01-21T18:17:42Z","modified":"2025-04-16T16:47:01.63Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:33:01.166399Z"}],"euvd":[{"id":"EUVD-2021-31301","description":"Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances. An attacker in possession of the password may gain privileges on all installations of this software.","status":"published","published":"2022-01-21T18:17:42Z","modified":"2025-04-16T16:47:01Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T20:52:23.396616Z"}],"ghsa":[{"id":"GHSA-jpmr-g8fr-7x23","title":"Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely...","description":"Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances. An attacker in possession of the password may gain privileges on all installations of this software.","status":"published","published":"2022-01-22T00:00:23Z","modified":"2023-02-03T05:04:55Z","cwes":["CWE-798"],"updated_at":"2026-11-02T14:53:39.06882Z"}],"nvd":[{"id":"CVE-2021-44464","description":"Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances. An attacker in possession of the password may gain privileges on all installations of this software.","status":"published","published":"2022-01-21T19:15:09.403Z","modified":"2026-06-17T04:12:23.2Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:07:03.821385Z"}]}}
