CVE-2020-25166CWE-347

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

High · published April 14, 2022

CVSS v3.1
7.6
EPSS
0%
Percentile
40.0
In the wild
Unconfirmed
What it is

An improper verification of the cryptographic signature of firmware updates of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to generate valid firmware updates with arbitrary content that can be used to tamper with devices.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00473 · 40.0th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2022-04-14T20:05Z
EPSS history
Timeline
  • 14 APR 20:05Z
    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
    cvelistv5