A Missing Authentication for Critical Function vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to reconfigure the device from an unknown source because of lack of authentication on proprietary networking commands.
References
| Link | Resource |
|---|---|
| https://www.bbraunusa.com/en.htm | Broken Link |
| https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/mcafee-enterprise-atr-uncovers-vulnerabilities-in-globally-used-b-braun-infusion-pump/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
01 Sep 2021, 15:52
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:bbraun:spacecom2:*:*:*:*:*:*:*:* cpe:2.3:h:bbraun:infusomat_large_volume_pump_871305u:-:*:*:*:*:*:*:* cpe:2.3:h:bbraun:spacestation_8713142u:-:*:*:*:*:*:*:* |
|
| CWE | CWE-306 | |
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 8.6 |
| References | (MISC) https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/mcafee-enterprise-atr-uncovers-vulnerabilities-in-globally-used-b-braun-infusion-pump/ - Third Party Advisory | |
| References | (MISC) https://www.bbraunusa.com/en.htm - Broken Link |
25 Aug 2021, 12:20
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-08-25 12:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-33882
Mitre link : CVE-2021-33882
CVE.ORG link : CVE-2021-33882
JSON object : View
Products Affected
bbraun
- spacestation_8713142u
- spacecom2
- infusomat_large_volume_pump_871305u
CWE
CWE-306
Missing Authentication for Critical Function