Summary
Successful exploitation of this vulnerability could allow a sophisticated and authenticated attacker to compromise the security of the Space communication device Battery Pack SP with Wi-Fi. An attacker could escalate privileges, view sensitive information, upload arbitrary files, and perform remote code execution.
Vulnerabilities 1
-
Medium 4.9
Authenticated eval injection in B. Braun Space Battery pack SP with Wi-Fi
An improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web server in versions L90/U70 and L92/U92 can be used to gain administrative access to the WiFi communication module. An authenticated user, hav…
Revision history
-
#1
CSAF Creation Date
References
-
ICS Advisory ICSMA-23-103-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-103-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://us-cert.cisa.gov/ics/Recommended-Practices
-
Recommended Practices
https://cisa.gov/ics