Skip to content
OpenAdvisories

Product · B. Braun Melsungen

Data module compactplus

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.6
    CVE-2020-25166

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    An improper verification of the cryptographic signature of firmware updates of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to generate valid firmware updates with arbitr…

    B. Braun Melsungen Battery pack with Wi-Fi SpaceCom Data module compactplus
  • High 7.5
    CVE-2020-25162

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    A XPath injection vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows unauthenticated remote attackers to access sensitive information and escalate privileges.

    B. Braun Melsungen Data module compactplus Battery pack with Wi-Fi SpaceCom
  • High 7.6
    CVE-2020-25158

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    A reflected cross-site scripting (XSS) vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to inject arbitrary web script or HTML into various locations.

    B. Braun Melsungen Battery pack with Wi-Fi SpaceCom Data module compactplus
  • High 7.2
    CVE-2020-25156

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in possession of cryptographic material to access the device as root.

    B. Braun Melsungen Battery pack with Wi-Fi SpaceCom Data module compactplus
  • High 7.6
    CVE-2020-25150

    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

    A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with service user privileges to upload arbitrary files. By uploading a specially crafted …

    B. Braun Melsungen SpaceCom Data module compactplus Battery pack with Wi-Fi