High 7.5HealthcarePublished Jan 21, 2022

CVE-2021-23236Fresenius Kabi Agilia Connect Infusion System uncontrolled resource consumption

Updated under an hour ago (Oct 28, 2026, 1:10 AM ET)

Does this affect you?

It affects Fresenius Kabi Agilia Link+ and 6 other products. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 1.07%, higher than 65% of scored CVEs.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Fresenius Kabi Agilia Link+

Exploited in the last 30 days

Requests may be used to interrupt the normal operation of the device. When exploited, Fresenius Kabi Agilia Link+ version 3.0 must be rebooted via a hard reset triggered by pressing a button on the rack system.

CVSS: 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): CWE-400
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): 1.07% (percentile 65)
Assigned by: icscert
NVD analysis: Modified
Record last updated: Apr 16, 2025
First seen by InfoSec Signals: Oct 12, 2026

Affected products

Affected products

Fresenius Kabi Agilia Link+ fresenius_kabi:agilia_link+ (from the name)	from unspecified before 3.0	CNA record
fresenius-kabi agilia_partner_maintenance_software fresenius-kabi:agilia_partner_maintenance_software	through 3.3.0	NVD
fresenius-kabi vigilant_centerium fresenius-kabi:vigilant_centerium	1.0	NVD
fresenius-kabi vigilant_insight fresenius-kabi:vigilant_insight	1.0	NVD
fresenius-kabi vigilant_mastermed fresenius-kabi:vigilant_mastermed	1.0	NVD
fresenius-kabi agilia_connect_firmware fresenius-kabi:agilia_connect_firmware	through d25	NVD
fresenius-kabi link+_agilia_firmware fresenius-kabi:link+_agilia_firmware	before 3.0; 3.0; 3.0	NVD

References

References

https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01	x-refsource-misc, third-party-advisory, us-government-resource

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.