Vulnerability Details CVE-2021-33883
A Cleartext Transmission of Sensitive Information vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to obtain sensitive information by snooping on the network traffic. The exposed data includes critical values for a pump's internal configuration.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.6%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 5.0
References
- https://www.bbraunusa.com/en.htm
- https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/mcafee-enterprise-atr-uncovers-vulnerabilities-in-globally-used-b-braun-infusion-pump/
- https://www.bbraunusa.com/en.htm
- https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/mcafee-enterprise-atr-uncovers-vulnerabilities-in-globally-used-b-braun-infusion-pump/
Products affected by CVE-2021-33883
-
cpe:2.3:h:bbraun:infusomat_large_volume_pump_871305u:-
-
cpe:2.3:h:bbraun:spacestation_8713142u:-
-
cpe:2.3:o:bbraun:spacecom2:-