Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

A vulnerability in the configuration import mechanism of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with command line access to the underlying Linux system to escalate privileges to the root user.

CVSS 1 Total

Learn more
ScoreSeverityVersionVector String
6.7MEDIUM3.1CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Product Status

Learn more

Versions 2 Total

Default Status: unknown

affected

  • affected through U61 
  • affected through L81 

Versions 2 Total

Default Status: unknown

affected

  • affected through U61 
  • affected through L81 

Versions 2 Total

Default Status: unknown

affected

  • affected at A10 
  • affected at A11 

Credits

  • Julian Suleder, Nils Emmerich, and Birk Kauer of ERNW Research GmbH; Dr. Oliver Matula of ERNW Enno Rey Netzwerke GmbH, reported these vulnerabilities to the Federal Office for Information Security (BSI), Germany, in the context of the BSI project ManiMed (Manipulation of medical devices).

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.