Description
Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in possession of cryptographic material to access the device as root.
Scores
CVSS v3
7.2
EPSS
0.0029
EPSS Percentile
52.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-489
Status
published
Products (3)
bbraun/datamodule_compactplus
a10
bbraun/datamodule_compactplus
a11
bbraun/spacecom
< l81
Published
Apr 14, 2022
Tracked Since
Feb 18, 2026