CVE-2020-25160

· MEDIUMModified

← All CVEs

CVSS v3.1

6.8

EPSS

0.20%

Published

Apr 14, 2022

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Improper access controls in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enables attackers to extract and tamper with the devices network configuration.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Weaknesses (CWE)

CWE-284

Affected Products (5)

bbraun · datamodule_compactplusvulnerable

bbraun · datamodule_compactplus

bbraun · spacecomvulnerable

bbraun · spacecom

References (4)

https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html

Broken Link

https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02

Third Party AdvisoryUS Government Resource

https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html

Broken Link

https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02

Third Party AdvisoryUS Government Resource

KEV Catalog EPSS Scores Vendors All CVEs