PT-2022-8706
CVE-2020-25164
·
Published
2022-04-14
·
Updated
2022-04-21
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
B. Braun Melsungen AG SpaceCom versions L81/U61 and earlier
B. Braun Melsungen AG Data module compactplus versions A10 and A11
Description
A vulnerability allows attackers to recover user credentials of the administrative interface.
Recommendations
For B. Braun Melsungen AG SpaceCom versions L81/U61 and earlier, update to a version later than L81/U61 to resolve the issue.
For B. Braun Melsungen AG Data module compactplus versions A10 and A11, update to a version later than A11 to resolve the issue.
As a temporary workaround, consider restricting access to the administrative interface until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾