CVE-2020-25150: B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
B. Braun Melsungen AG · SpaceCom
Affected: B. Braun Melsungen AG SpaceCom · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 75% of scored CVEs
DescriptionCVE.org
A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with service user privileges to upload arbitrary files. By uploading a specially crafted tar file an attacker can execute arbitrary commands.
Affected products3
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- B. Braun Melsungen AG · SpaceComup to and including U61; up to and including L81
- B. Braun Melsungen AG · Battery pack with Wi-Fiup to and including U61; up to and including L81
- B. Braun Melsungen AG · Data module compactplusA10; A11
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- B. Braun Melsungen AG
- Published
- April 2022
CoverageNo articles yet
No CyberSIXT article names CVE-2020-25150 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.