CVE-2020-16238 MEDIUM

CVE-2020-16238: B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

Vendor B. Braun Melsungen Ag
Product SpaceCom
Weakness CWE-269
Published April 14, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

6.7/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A vulnerability in the configuration import mechanism of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with command line access to the underlying Linux system to escalate privileges to the root user.

Key dates

02Disclosure timeline

April 14, 2022 CVE published
April 16, 2025 Record updated