Skip to content
OpenAdvisories
High ICSMA-20-296-02 11 CVEs

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

Published Oct 22, 2020 · Updated Oct 22, 2020

Vendor: B. Braun Medical Product: Battery pack with Wi-Fi Product: Data module compactplus Product: SpaceCom

Summary

Successful exploitation of these vulnerabilities could allow an attacker to compromise the security of the Space or compactplus communication devices, allowing an attacker to escalate privileges, view sensitive information, upload arbitrary files, and perform remote code execution.

Vulnerabilities 11

  • High 7.6
    CVE-2020-25150

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with service user privileges to upload arbitrary files. By uploading a specially crafted …

    B. Braun Melsungen Battery pack with Wi-Fi SpaceCom Data module compactplus
  • High 7.6
    CVE-2020-25158

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    A reflected cross-site scripting (XSS) vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to inject arbitrary web script or HTML into various locations.

    B. Braun Melsungen Battery pack with Wi-Fi SpaceCom Data module compactplus
  • High 7.6
    CVE-2020-25166

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    An improper verification of the cryptographic signature of firmware updates of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to generate valid firmware updates with arbitr…

    B. Braun Melsungen Data module compactplus Battery pack with Wi-Fi SpaceCom
  • High 7.5
    CVE-2020-25162

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    A XPath injection vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows unauthenticated remote attackers to access sensitive information and escalate privileges.

    B. Braun Melsungen Data module compactplus Battery pack with Wi-Fi SpaceCom
  • High 7.2
    CVE-2020-25156

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in possession of cryptographic material to access the device as root.

    B. Braun Melsungen Battery pack with Wi-Fi SpaceCom Data module compactplus
  • Medium 6.8
    CVE-2020-25160

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    Improper access controls in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enables attackers to extract and tamper with the devices network configuration.

    B. Braun Melsungen SpaceCom Data module compactplus Battery pack with Wi-Fi
  • Medium 6.7
    CVE-2020-16238

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    A vulnerability in the configuration import mechanism of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with command line access to the underlying Linux system to escalate …

    B. Braun Melsungen SpaceCom Data module compactplus Battery pack with Wi-Fi
  • Medium 6.5
    CVE-2020-25152

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to hijack web sessions and escalate privileges.

    B. Braun Melsungen Data module compactplus Battery pack with Wi-Fi SpaceCom
  • Medium 6.5
    CVE-2020-25164

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    A vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to recover user credentials of the administrative interface.

    B. Braun Melsungen Battery pack with Wi-Fi SpaceCom Data module compactplus
  • Medium 5.4
    CVE-2020-25154

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    An open redirect vulnerability in the administrative interface of the B. Braun Melsungen AG SpaceCom device Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to redirect users to malicious websites.

    B. Braun Melsungen Battery pack with Wi-Fi SpaceCom Data module compactplus
  • Low 3.3
    CVE-2020-25168

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    Hard-coded credentials in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enable attackers with command line access to access the device’s Wi-Fi module.

    B. Braun Melsungen SpaceCom Data module compactplus Battery pack with Wi-Fi

Revision history

  1. #1

    ICSMA-20-296-02 B.Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

References