B. Braun Melsungen AG

Records24All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

B. Braun Melsungen AG records in CISA KEV

No B. Braun Melsungen AG vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Datamodule Compactplus 11 records MEDIUM Spacecom 11 records MEDIUM Spacecom2 5 records MEDIUM Onlinesuite Application Package 3 records MEDIUM Battery-pack Sp With Wifi Firmware 1 record LOW Station Firmware 1 record LOW

Records

24 records

TI-2021-13205 CVE-2021-33885 · GHSA-84xj-78rw-rf33

An Insufficient Verification of Data Authenticity vulnerability in B.

MEDIUM 51

An Insufficient Verification of Data Authenticity vulnerability in B.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0558 Published 2021-08-25 No fix listed CWE-347

TI-2025-02952 CVE-2025-3365 · GHSA-2f28-7x9r-f2vq

Relative Path Traversal in OnlineSuite

MEDIUM 50

A missing protection against path traversal allows to access any file on the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2025-06-06 No fix listed CWE-23

TI-2025-02910 CVE-2025-3322 · GHSA-8xrw-gw88-gpfc

Improper Neutralization of Special Elements in OnlineSuite

MEDIUM 50

An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00669 Published 2025-06-06 No fix listed CWE-917

TI-2020-15414 CVE-2020-25172 · GHSA-w64q-vf23-c7h3

Path traversal in B. Braun Melsungen AG OnlineSuite

MEDIUM 46

A relative path traversal attack in the B.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02033 Published 2020-11-06 No fix listed CWE-23

TI-2020-15404 CVE-2020-25162 · GHSA-m67r-c84w-9m53

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

MEDIUM 43

A XPath injection vulnerability in the B.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01879 Published 2022-04-14 No fix listed CWE-643

TI-2025-02909 CVE-2025-3321 · GHSA-4474-w9fw-64jh

Use of Hard-coded Credentials in OnlineSuite

MEDIUM 42

A predefined administrative account is not documented and cannot be deactivated.

CVSS 4.0CRITICAL 9.4 Local No auth No interaction EPSS 0.00166 Published 2025-06-06 No fix listed CWE-798

TI-2021-13204 CVE-2021-33884 · GHSA-23rr-vcw7-54r8

An Unrestricted Upload of File with Dangerous Type vulnerability in B.

MEDIUM 41

An Unrestricted Upload of File with Dangerous Type vulnerability in B.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00984 Published 2021-08-25 No fix listed CWE-434

TI-2020-15392 CVE-2020-25150 · GHSA-qxgr-6j8v-x3cr

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

MEDIUM 41

A relative path traversal attack in the B.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01529 Published 2022-04-14 No fix listed CWE-23

TI-2021-13206 CVE-2021-33886 · GHSA-7fpg-565m-qfcv

An improper sanitization of input vulnerability in B.

MEDIUM 40

An improper sanitization of input vulnerability in B.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00827 Published 2021-08-25 No fix listed CWE-134

TI-2021-13202 CVE-2021-33882 · GHSA-7m39-hfcx-7qr8

A Missing Authentication for Critical Function vulnerability in B.

LOW 39

A Missing Authentication for Critical Function vulnerability in B.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.011 Published 2021-08-25 No fix listed CWE-306

TI-2020-15394 CVE-2020-25152 · GHSA-547h-p6jv-c3g9

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

LOW 38

A session fixation vulnerability in the B.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01281 Published 2022-04-14 No fix listed CWE-384

TI-2020-15412 CVE-2020-25170 · GHSA-9m9g-8648-6jwx

CSV injection in B. Braun Melsungen AG OnlineSuite

LOW 36

An Excel Macro Injection vulnerability exists in the export feature in the B.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00977 Published 2020-11-06 No fix listed CWE-1236

TI-2020-15398 CVE-2020-25156 · GHSA-77qv-4r48-j87r

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

LOW 36

Active debug code in the B.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01186 Published 2022-04-14 No fix listed CWE-489

TI-2020-15400 CVE-2020-25158 · GHSA-v5w6-mxr7-hx38

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

LOW 35

A reflected cross-site scripting (XSS) vulnerability in the B.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00848 Published 2022-04-14 No fix listed CWE-79

TI-2021-13203 CVE-2021-33883 · GHSA-5prv-q7hh-r3fg

A Cleartext Transmission of Sensitive Information vulnerability in B.

LOW 34

A Cleartext Transmission of Sensitive Information vulnerability in B.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00832 Published 2021-08-25 No fix listed CWE-319

TI-2020-15416 CVE-2020-25174 · GHSA-x7wg-2f27-pc97

Uncontrolled search path in B. Braun Melsungen AG OnlineSuite

LOW 34

A DLL hijacking vulnerability in the B.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0047 Published 2020-11-06 No fix listed CWE-427

TI-2020-15408 CVE-2020-25166 · GHSA-mwfc-gqvv-7hq8

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

LOW 34

An improper verification of the cryptographic signature of firmware updates of the B.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00473 Published 2022-04-14 No fix listed CWE-347

TI-2020-15406 CVE-2020-25164 · GHSA-vj23-8whx-57h9

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

LOW 34

A vulnerability in the B.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00624 Published 2022-04-14 No fix listed CWE-759

TI-2023-00840 CVE-2023-0888 · GHSA-9w87-qf4h-4fc6

Authenticated eval injection in B. Braun Space Battery pack SP with Wi-Fi

LOW 33

An improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web server in versions L90/U70 and L92/U92 can be used to gain administrative access to the WiFi communica…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00604 Published 2023-03-13 No fix listed CWE-95

TI-2020-12767 CVE-2020-16238 · GHSA-vmjv-4cc9-q9mj

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

LOW 31

A vulnerability in the configuration import mechanism of the B.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00249 Published 2022-04-14 No fix listed CWE-269

TI-2020-15402 CVE-2020-25160 · GHSA-2mqp-7gq6-4qc7

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

LOW 29

Improper access controls in the B.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00208 Published 2022-04-14 No fix listed CWE-284

TI-2017-03928 CVE-2017-6018 · GHSA-cmhp-37v4-3fmv

Open redirect in B. Braun Medical SpaceCom

LOW 29

An open redirect issue was discovered in B.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00954 Published 2017-06-30 No fix listed CWE-601

TI-2020-15396 CVE-2020-25154 · GHSA-6f7x-3vm2-cjhw

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

LOW 28

An open redirect vulnerability in the administrative interface of the B.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00663 Published 2022-04-14 No fix listed CWE-601

TI-2020-15410 CVE-2020-25168 · GHSA-grpx-2q9c-2wg3

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

LOW 15

Hard-coded credentials in the B.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00214 Published 2022-04-14 No fix listed CWE-798

Open these records in search →