Skip to content
OpenAdvisories
Critical ICSMA-21-294-01 5 CVEs

B. Braun Infusomat Space Large Volume Pump

Published Oct 21, 2021 · Updated Oct 21, 2021

Vendor: B. Braun Medical Product: Battery Pack SP with Wi-Fi Product: Battery pack SP with WiFi Product: Data module compactplus Product: SpaceStation with SpaceCom 2

Summary

Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to gain user-level command-line access, send the device malicious data to be used in place of correct data, reconfigure the device from an unknown source, obtain sensitive information, or overwrite critical files.

Vulnerabilities 5

  • Critical 10.0
    CVE-2021-33885

    An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remo…

  • High 8.1
    CVE-2021-33886

    An improper sanitization of input vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticat…

  • Medium 6.8
    CVE-2021-33882

    A Missing Authentication for Critical Function vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote …

  • Medium 6.5
    CVE-2021-33884

    An Unrestricted Upload of File with Dangerous Type vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows remot…

  • Medium 5.9
    CVE-2021-33883

    A Cleartext Transmission of Sensitive Information vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remo…

Revision history

  1. #1

    ICSMA-21-294-01 B. Braun Infusomat Space Large Volume Pump

References