What’s Vulnerable › Vulnerabilities

CVE-2020-25150: B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-14 · updated 2026-06-17
• Weakness: CWE-23

Description

A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with service user privileges to upload arbitrary files. By uploading a specially crafted tar file an attacker can execute arbitrary commands.

Affected products

• Bbraun Datamodule Compactplus: a10, a11
• B. Braun Melsungen AG SpaceCom: through l81

References

• https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
• https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02
• https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
• https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02

Get alerted when CVE-2020-25150 or the next vulnerability affects your stack