PT-2022-8701 · B. Braun Melsungen Ag · Data Module Compactplus+1

Published 2022-04-14 · Updated 2022-04-21 · CVE-2020-25156

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions B. Braun Melsungen AG SpaceCom version L8/U61 Data module compactplus versions A10 and A11 and earlier

Description The issue allows attackers with cryptographic material to access the device as root due to active debug code.

Recommendations For B. Braun Melsungen AG SpaceCom version L8/U61, remove or disable the active debug code to prevent unauthorized access. For Data module compactplus versions A10 and A11 and earlier, remove or disable the active debug code to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-489

Related Identifiers

CVE-2020-25156

Affected Products

B. Braun Melsungen Ag Spacecom

Data Module Compactplus

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-25156 · Security Note
• https://osv.dev/vulnerability/CVE-2020-25156 · Vendor Advisory
• https://cisa.gov/uscert/ics/advisories/icsma-20-296-02 · Note
• https://bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html · Note