GCVE - cpe:2.3:h:bbraun:spacecom:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:bbraun:spacecom:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Bbraun (`77038acd-173e-5e7d-8fa4-bdabd4a6d81c`)
Product	Spacecom (`4ebdf7d5-6b59-5a82-9607-ecd83528de66`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-25168`	not_vulnerable	2026-06-08 05:22:36.081065	B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus LOW (3.3) Hard-coded credentials in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enable attackers with command line access to access the device’s Wi-Fi module. Published: 2022-04-14T20:06:00.000Z Updated: 2025-04-16T16:29:29.444Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25166`	not_vulnerable	2026-06-08 05:22:36.079457	B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus HIGH (7.6) An improper verification of the cryptographic signature of firmware updates of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to generate valid firmware updates with arbitrary content that can be used to tamper with devices. Published: 2022-04-14T20:05:59.000Z Updated: 2025-04-16T16:29:44.744Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25164`	not_vulnerable	2026-06-08 05:22:36.074407	B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus MEDIUM (6.5) A vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to recover user credentials of the administrative interface. Published: 2022-04-14T20:06:00.000Z Updated: 2025-04-16T16:29:36.723Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25162`	not_vulnerable	2026-06-08 05:22:36.070635	B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus HIGH (7.5) A XPath injection vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows unauthenticated remote attackers to access sensitive information and escalate privileges. Published: 2022-04-14T20:05:57.000Z Updated: 2025-04-16T16:29:59.860Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25160`	not_vulnerable	2026-06-08 05:22:36.066168	B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus MEDIUM (6.8) Improper access controls in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enables attackers to extract and tamper with the devices network configuration. Published: 2022-04-14T20:05:55.000Z Updated: 2025-04-16T16:30:17.021Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25158`	not_vulnerable	2026-06-08 05:22:36.060971	B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus HIGH (7.6) A reflected cross-site scripting (XSS) vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to inject arbitrary web script or HTML into various locations. Published: 2022-04-14T20:05:56.000Z Updated: 2025-04-16T16:30:09.180Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25156`	not_vulnerable	2026-06-08 05:22:36.055761	B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus HIGH (7.2) Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in possession of cryptographic material to access the device as root. Published: 2022-04-14T20:05:53.000Z Updated: 2025-04-16T17:55:34.722Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25154`	not_vulnerable	2026-06-08 05:22:36.054173	B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus MEDIUM (5.4) An open redirect vulnerability in the administrative interface of the B. Braun Melsungen AG SpaceCom device Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to redirect users to malicious websites. Published: 2022-04-14T20:05:58.000Z Updated: 2025-04-16T16:29:52.798Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25152`	not_vulnerable	2026-06-08 05:22:36.049563	B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus MEDIUM (6.5) A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to hijack web sessions and escalate privileges. Published: 2022-04-14T20:05:55.000Z Updated: 2025-04-16T16:30:24.443Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25150`	not_vulnerable	2026-06-08 05:22:36.045899	B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus HIGH (7.6) A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with service user privileges to upload arbitrary files. By uploading a specially crafted tar file an attacker can execute arbitrary commands. Published: 2022-04-14T20:05:52.000Z Updated: 2025-04-16T16:30:32.103Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16238`	not_vulnerable	2026-06-08 05:19:27.833160	B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus MEDIUM (6.7) A vulnerability in the configuration import mechanism of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with command line access to the underlying Linux system to escalate privileges to the root user. Published: 2022-04-14T20:05:53.000Z Updated: 2025-04-16T17:55:42.177Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.