Input validation

2022-04-1421:15:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

JSON

An improper verification of the cryptographic signature of firmware updates of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to generate valid firmware updates with arbitrary content that can be used to tamper with devices.

CPENameOperatorVersion
datamodule_compactpluseq10.0.97
datamodule_compactpluseq11.0.97
spacecomeq<= l81

Name	Operator	Version
datamodule_compactplus	eq	10.0.97
datamodule_compactplus	eq	11.0.97
spacecom	eq	<= l81

References

www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html

www.cisa.gov/uscert/ics/advisories/icsma-20-296-02