CVE-2021-33883

Опубликовано: 25 авг. 2021

Источник: nvd

CVSS3: 5.9

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A Cleartext Transmission of Sensitive Information vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to obtain sensitive information by snooping on the network traffic. The exposed data includes critical values for a pump's internal configuration.

Ссылки

https://www.bbraunusa.com/en.htm
Broken Link
https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/mcafee-enterprise-atr-uncovers-vulnerabilities-in-globally-used-b-braun-infusion-pump/
Exploit
Third Party Advisory
https://www.bbraunusa.com/en.htm
Broken Link
https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/mcafee-enterprise-atr-uncovers-vulnerabilities-in-globally-used-b-braun-infusion-pump/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:bbraun:spacecom2:*:*:*:*:*:*:*:*

Версия до 012u000062 (исключая)

Одно из

cpe:2.3:h:bbraun:infusomat_large_volume_pump_871305u:-:*:*:*:*:*:*:*

cpe:2.3:h:bbraun:spacestation_8713142u:-:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00251

Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-319

Связанные уязвимости

GHSA-5prv-q7hh-r3fg

github

больше 3 лет назад

EPSS

Процентиль: 48%

0.00251

Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-319