CVE-2021-23233
Published: 21 January 2022
Summary
CVE-2021-23233 is a high-severity Improper Access Control (CWE-284) vulnerability in Fresenius-Kabi Link\+ Agilia Firmware. Its CVSS base score is 7.3 (High).
Operationally, ranked in the top 44.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-10333
Vulnerability details
Sensitive endpoints in Fresenius Kabi Agilia Link+ v3.0 and prior can be accessed without any authentication information such as the session cookie. An attacker can send requests to sensitive endpoints as an unauthenticated user to perform critical actions or modify…
more
critical configuration parameters.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Security training teaches access control policies and enforcement, reducing improper access control implementations.
Authorization servers centrally manage access rights, preventing improper access control.
Central management enforces consistent access-control policies across systems, reducing the likelihood of missing or inconsistent enforcement.
Resources allocated to security programs enable proper design, implementation, and maintenance of access control mechanisms.
Screening criteria tied to position sensitivity limit the set of individuals who can be granted access, shrinking the attack surface for improper access control weaknesses.
Threat hunting directly searches for indicators of unauthorized access or control violations that bypassed preventive mechanisms.
Defining security roles/responsibilities and integrating risk management into the SDLC directly reduces improper access control by ensuring access decisions are designed and reviewed throughout development.
Guidance on effective use of access control mechanisms and known configuration vulnerabilities makes improper access control harder to exploit.