What’s Vulnerable › Vulnerabilities

CVE-2020-25162: B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-14 · updated 2026-06-17
• Weakness: CWE-643

Description

A XPath injection vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows unauthenticated remote attackers to access sensitive information and escalate privileges.

Affected products

• Bbraun Datamodule Compactplus: a10, a11
• B. Braun Melsungen AG SpaceCom: through l81

References

• https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
• https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02
• https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
• https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02

Get alerted when CVE-2020-25162 or the next vulnerability affects your stack