CVE-2020-25164
B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
In short
A vulnerability in B. Braun medical devices (SpaceCom and Data module compactplus) allows attackers to recover administrator login credentials, potentially giving unauthorized access to critical medical device settings.
Technical detail
CWE-759 (Use of a One-Way Hash with a Predictable Salt) affects SpaceCom L81/U61 and earlier, and Data module compactplus A10-A11. Attackers can recover administrative credentials through cryptographic weakness in credential storage; successful exploitation grants unauthorized administrative access to medical device interfaces.
Summary generated and translated by AI from the official description.
A vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to recover user credentials of the administrative interface.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
B. Braun Melsungen AG · Battery pack with Wi-FiB. Braun Melsungen AG · Data module compactplusB. Braun Melsungen AG · SpaceComWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →