Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

An improper verification of the cryptographic signature of firmware updates of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to generate valid firmware updates with arbitrary content that can be used to tamper with devices.

CVSS 1 Total

Learn more
ScoreSeverityVersionVector String
7.6HIGH3.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Product Status

Learn more

Versions 2 Total

Default Status: unknown

affected

  • affected through U61 
  • affected through L81 

Versions 2 Total

Default Status: unknown

affected

  • affected through U61 
  • affected through L81 

Versions 2 Total

Default Status: unknown

affected

  • affected at A10 
  • affected at A11 

Credits

  • Julian Suleder, Nils Emmerich, and Birk Kauer of ERNW Research GmbH; Dr. Oliver Matula of ERNW Enno Rey Netzwerke GmbH, reported these vulnerabilities to the Federal Office for Information Security (BSI), Germany, in the context of the BSI project ManiMed (Manipulation of medical devices).

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.