Infusomat Large Volume Pump 871305U
Approved changes feed: RSS · Atom
cpe:2.3:h:bbraun:infusomat_large_volume_pump_871305u:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Bbraun (77038acd-173e-5e7d-8fa4-bdabd4a6d81c) |
|---|---|
| Product | Infusomat Large Volume Pump 871305U (8f28fdba-ce22-5bef-91f5-7df2e9ca397f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-33886 |
not_vulnerable | 2026-06-08 05:32:12.615883 |
Details available
HIGH (8.1)
An improper sanitization of input vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to gain user-level command-line access by passing a raw external string straight through to printf statements. The attacker is required to be on the same network as the device.
Published: 2021-08-25T11:38:25.000Z
Updated: 2024-08-04T00:05:51.093Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33885 |
not_vulnerable | 2026-06-08 05:32:12.615504 |
Details available
CRITICAL (10)
An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to send the device malicious data that will be used in place of the correct data. This results in full system command access and execution because of the lack of cryptographic signatures on critical data sets.
Published: 2021-08-25T11:38:20.000Z
Updated: 2024-08-04T00:05:52.125Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33884 |
not_vulnerable | 2026-06-08 05:32:12.615107 |
Details available
MEDIUM (6.5)
An Unrestricted Upload of File with Dangerous Type vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows remote attackers to upload any files to the /tmp directory of the device through the webpage API. This can result in critical files being overwritten.
Published: 2021-08-25T11:20:00.000Z
Updated: 2024-08-04T00:05:51.778Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33883 |
not_vulnerable | 2026-06-08 05:32:12.614589 |
Details available
MEDIUM (5.9)
A Cleartext Transmission of Sensitive Information vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to obtain sensitive information by snooping on the network traffic. The exposed data includes critical values for a pump's internal configuration.
Published: 2021-08-25T11:19:53.000Z
Updated: 2024-08-04T00:05:51.707Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33882 |
not_vulnerable | 2026-06-08 05:32:12.613459 |
Details available
MEDIUM (6.8)
A Missing Authentication for Critical Function vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to reconfigure the device from an unknown source because of lack of authentication on proprietary networking commands.
Published: 2021-08-25T11:19:46.000Z
Updated: 2024-08-04T00:05:51.650Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.