CVE-2020-25150CWE-23

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

High · published April 14, 2022

CVSS v3.1
7.6
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with service user privileges to upload arbitrary files. By uploading a specially crafted tar file an attacker can execute arbitrary commands.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.01529 · 74.5th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2022-04-14T20:05Z
EPSS history
Timeline
  • 14 APR 20:05Z
    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
    cvelistv5