Back to CVE Browser

CVE-2021-33882

MEDIUM

6.8

CVSS Severity Score

EPSS Score0.1710%

EPSS Percentile12.03th

PublishedAug 25, 2021

Last ModifiedNov 21, 2024

Vulnerability Description

A Missing Authentication for Critical Function vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to reconfigure the device from an unknown source because of lack of authentication on proprietary networking commands.

Affected Platforms (CPE)

💻

Bbraun

Spacecom2

< 012u000062

References & Advisories

🔗 https://www.bbraunusa.com/en.htm

🔗 https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/mcafee-enterprise-atr-uncovers-vulnerabilities-in-globally-used-b-braun-infusion-pump/

🔗 https://www.bbraunusa.com/en.htm

🔗 https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/mcafee-enterprise-atr-uncovers-vulnerabilities-in-globally-used-b-braun-infusion-pump/

Related Vulnerabilities

CVE-2021-3388510.0

An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthen...

CVE-2021-338868.1

An improper sanitization of input vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker...

CVE-2021-338846.5

An Unrestricted Upload of File with Dangerous Type vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows remote attackers...

CVE-2021-338835.9

A Cleartext Transmission of Sensitive Information vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker...