HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2020-25150

CVSS 7.6v3.1pub. 2022-04-14upd. 2024-11-21

A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with service user privileges to upload arbitrary files. By uploading a specially crafted tar file an attacker can execute arbitrary commands.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

  • Bbraun Datamodule Compactplus

    OS
    Bbraun
    a10a11

  • Bbraun Spacecom

    OS
    Bbraun
    ≤ l81
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2020-25156HIGH7.2ten sam produkt

Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versio...

CVE-2020-25162HIGH7.5ten sam produkt

A XPath injection vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Dat...

CVE-2020-25158HIGH7.6ten sam produkt

A reflected cross-site scripting (XSS) vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and...

CVE-2020-25166HIGH7.6ten sam produkt

An improper verification of the cryptographic signature of firmware updates of the B. Braun Melsungen AG Space...

CVE-2020-25164MEDIUM6.5ten sam produkt

A vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compact...