CVE-2020-25168

Name of the Vulnerable Software and Affected Versions B. Braun Melsungen AG SpaceCom versions L81/U61 and earlier B. Braun Melsungen AG Data module compactplus versions A10 and A11

Description The issue concerns hard-coded credentials that allow attackers with command line access to access the device's Wi-Fi module.

Recommendations For B. Braun Melsungen AG SpaceCom versions L81/U61 and earlier, consider changing the hard-coded credentials to unique, secure credentials. For B. Braun Melsungen AG Data module compactplus versions A10 and A11, consider changing the hard-coded credentials to unique, secure credentials. As a temporary workaround, consider restricting command line access to the device until a patch is available.