B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

B. Braun medical devices don't properly verify that firmware updates are legitimate, allowing attackers to create fake updates that can alter how the devices work.

CWE-347 involves improper cryptographic signature verification on firmware updates for B. Braun SpaceCom and Data module compactplus devices. An attacker can craft malicious firmware with arbitrary content that passes validation, enabling device tampering without authentication. The attack requires the ability to deliver the malicious firmware to the device, but successful exploitation allows unauthorized modification of medical device behavior.