CVE-2021-33882
Severity Score
8.6
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A Missing Authentication for Critical Function vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to reconfigure the device from an unknown source because of lack of authentication on proprietary networking commands.
Una vulnerabilidad de Falta de Autenticación para una Función Crítica en B. Braun SpaceCom2 versiones anteriores a 012U000062, permite a un atacante remoto reconfigurar el dispositivo desde una fuente desconocida debido a una falta de autenticación en los comandos de red propietarios.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-06-06 CVE Reserved
- 2021-08-25 CVE Published
- 2024-08-04 CVE Updated
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-306: Missing Authentication for Critical Function
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://www.bbraunusa.com/en.htm | Broken Link | |
| https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/mcafee-enterprise-atr-uncovers-vulnerabilities-in-globally-used-b-braun-infusion-pump | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Bbraun Search vendor "Bbraun" | Spacecom2 Search vendor "Bbraun" for product "Spacecom2" | < 012u000062 Search vendor "Bbraun" for product "Spacecom2" and version " < 012u000062" | - |
Affected
| in | Bbraun Search vendor "Bbraun" | Infusomat Large Volume Pump 871305u Search vendor "Bbraun" for product "Infusomat Large Volume Pump 871305u" | - | - |
Safe
|
| Bbraun Search vendor "Bbraun" | Spacecom2 Search vendor "Bbraun" for product "Spacecom2" | < 012u000062 Search vendor "Bbraun" for product "Spacecom2" and version " < 012u000062" | - |
Affected
| in | Bbraun Search vendor "Bbraun" | Spacestation 8713142u Search vendor "Bbraun" for product "Spacestation 8713142u" | - | - |
Safe
|