PT-2017-16835 · B. Braun Medical · B. Braun Medical Spacestation+1

Marc Ruef + 1 · Publicado 2017-06-30 · Atualizado 2019-10-09 · CVE-2017-6018

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions B. Braun Medical SpaceStation with SpaceCom module versions prior to 012U000040 B. Braun Medical SpaceStation versions prior to 012U000040 with installed SpaceCom module

Description An open redirect issue was discovered in the B. Braun Medical SpaceCom module. The web server of the affected product accepts untrusted input, which could allow attackers to redirect the request to an unintended URL contained within untrusted input.

Recommendations For SpaceStation with SpaceCom module, update to a version newer than 012U000040 to resolve the issue. For SpaceStation with installed SpaceCom module, update to a version newer than 012U000040 to resolve the issue.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2017-6018

Produtos afetados

B. Braun Medical Spacestation

Spacecom

Referências · 2

• https://ics-cert.us-cert.gov/advisories/ICSMA-17-082-02 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-6018 · Nota de Segurança