Skip to content
OpenAdvisories
High ICSMA-20-296-01 3 CVEs

B. Braun OnlineSuite

Published Oct 22, 2020 · Updated Oct 22, 2020

Vendor: B. Braun Medical Product: AP

Summary

Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, download and upload arbitrary files, and perform remote code execution.

Vulnerabilities 3

  • Unscored —
    CVE-2020-25170

    B. Braun OnlineSuite

    An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export.

    B. Braun Melsungen OnlineSuite
  • Unscored —
    CVE-2020-25172

    B. Braun OnlineSuite

    A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files.

    B. Braun Melsungen OnlineSuite
  • Unscored —
    CVE-2020-25174

    B. Braun OnlineSuite

    A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged user.

    B. Braun Melsungen OnlineSuite

Revision history

  1. #1

    ICSMA-20-296-01 B.Braun OnlineSuite

References