Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in possession of cryptographic material to access the device as root.

CVSS 1 Total

Learn more
ScoreSeverityVersionVector String
7.2HIGH3.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Product Status

Learn more

Versions 2 Total

Default Status: unknown

affected

  • affected through U61 
  • affected through L81 

Versions 2 Total

Default Status: unknown

affected

  • affected through U61 
  • affected through L81 

Versions 2 Total

Default Status: unknown

affected

  • affected at A10 
  • affected at A11 

Credits

  • Julian Suleder, Nils Emmerich, and Birk Kauer of ERNW Research GmbH; Dr. Oliver Matula of ERNW Enno Rey Netzwerke GmbH, reported these vulnerabilities to the Federal Office for Information Security (BSI), Germany, in the context of the BSI project ManiMed (Manipulation of medical devices).

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.