What’s Vulnerable › Vulnerabilities

CVE-2020-25168: B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-14 · updated 2026-06-17
• Weakness: CWE-798

Description

Hard-coded credentials in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enable attackers with command line access to access the device’s Wi-Fi module.

Affected products

• Bbraun Datamodule Compactplus: a10, a11
• B. Braun Melsungen AG SpaceCom: through l81

References

• https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
• https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02
• https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
• https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02

Get alerted when CVE-2020-25168 or the next vulnerability affects your stack