CVE-2021-43355

Name: CVE-2021-43355
Creator: NVD / NIST
Published: 2022-01-21T19:15:09.27+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

CRITICALCVSS 9.8/10EPSS 0.98%

Last modified Jun 17, 2026

CVE-2021-43355 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 allows user input to be validated on the client side without authentication by the server. The server should not rely on the correctness of the data because users might not support or block JavaScript or intentionally bypass the client-side checks. EPSS estimates a 0.98% chance of exploitation in the next 30 days.

Description

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 allows user input to be validated on the client side without authentication by the server. The server should not rely on the correctness of the data because users might not support or block JavaScript or intentionally bypass the client-side checks. An attacker with knowledge of the service user could circumvent the client-side control and login with service privileges.

Metrics

CVSS 3.1

9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability

0.98%

57.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Fresenius-Kabi	Agilia Partner Maintenance Software	<= 3.3.0
Fresenius-Kabi	Vigilant Centerium	1.0
Fresenius-Kabi	Vigilant Insight	1.0
Fresenius-Kabi	Vigilant Mastermed	1.0
Fresenius-Kabi	Agilia Connect Firmware	<= d25
Fresenius-Kabi	Link\+ Agilia Firmware	< 3.0
Fresenius-Kabi	Link\+ Agilia Firmware	3.0

References

https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01Third Party Advisory, US Government Resource
https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01Third Party Advisory, US Government Resource

Timeline

Published: Jan 21, 2022
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2021-43355?

How severe is CVE-2021-43355?

CVE-2021-43355 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 0.98% probability of exploitation in the next 30 days.

How do I fix CVE-2021-43355?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2021-43355?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST