CVE:CVE-2021-23195
CNNVD:CNNVD-202112-2126
Fresenius Kabi Agilia Connect Infusion System是德国Fresenius Kabi公司的一个输液系统。
Fresenius Kabi Agilia Connect Infusion System存在安全漏洞，该漏洞源于Vigilant API有激活自动索引(目录列表)的选项。当访问一个目录时，web服务器以HTML的形式传递它的全部内容。如果索引文件不存在，并且启用了目录列表功能，则会显示目录的所有内容，使攻击者可利用该漏洞能够识别并访问服务器上的文件。
solution:Upgrade fresenius-kabi agilia_connect_firmware to a higher version than d25,and avoid the version (,d25]; Upgrade fresenius-kabi agilia_partner_maintenance_software to a higher version than 3.3.0,and avoid the version (,3.3.0]; Upgrade fresenius-kabi vigilant_centerium to a higher version than 1.0,and avoid the version 1.0; Upgrade fresenius-kabi vigilant_insight to a higher version than 1.0,and avoid the version 1.0; Upgrade fresenius-kabi vigilant_mastermed to a higher version than 1.0,and avoid the version 1.0; Upgrade fresenius-kabi link+_agilia_firmware to a higher version than 3.0,3.0,3.0:d15,and avoid the version (,3.0),3.0,3.0:d15