What’s Vulnerable › Vulnerabilities

CVE-2020-25152: B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-14 · updated 2026-06-17
• Weakness: CWE-384

Description

A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to hijack web sessions and escalate privileges.

Affected products

• Bbraun Datamodule Compactplus: a10, a11
• B. Braun Melsungen AG SpaceCom: through l81

References

• https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
• https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02
• https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
• https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02

Get alerted when CVE-2020-25152 or the next vulnerability affects your stack