← Back

CVE-2020-16238

nvd nist
Published: Apr 14, 2022Modified: Jun 17, 2026

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

A vulnerability in the configuration import mechanism of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with command line access to the underlying Linux system to escalate privileges to the root user.

Affected (3)

Bbraun
2 products
Datamodule Compactplus
Spacecom
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bbraun
Datamodule Compactplus
Version a10
Datamodule Compactplus
Version a11
Running on/withPlatform Versions
Bbraun
Datamodule Compactplus
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Spacecom
Up to l81
Running on/withPlatform Versions
Bbraun
Spacecom
All versions

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (4)

Source: ics-cert@hq.dhs.gov
Broken Link
Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.