CVE-2020-25156
B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
In short
Debug code left active in B. Braun medical devices allows attackers with certain cryptographic keys to gain full control (root access) of the device. This is dangerous because these devices are used in hospitals to manage patient care.
Technical detail
Active debug code in B. Braun SpaceCom (L8/U61) and Data module compactplus (A10, A11) permits unauthenticated root access when cryptographic material is available. Attack vector requires possession of specific cryptographic credentials; impact includes complete device compromise and potential manipulation of medical functionality.
Summary generated and translated by AI from the official description.
Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in possession of cryptographic material to access the device as root.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
B. Braun Melsungen AG · Battery pack with Wi-FiB. Braun Melsungen AG · Data module compactplusB. Braun Melsungen AG · SpaceComWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →