CVE-2020-25160 MEDIUM

CVE-2020-25160: B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

Vendor B. Braun Melsungen Ag
Product SpaceCom
Weakness CWE-284
Published April 14, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

6.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

Improper access controls in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enables attackers to extract and tamper with the devices network configuration.

Key dates

02Disclosure timeline

April 14, 2022 CVE published
April 16, 2025 Record updated