Which versions of Bbraun Battery-pack Sp With Wifi Firmware are affected by CVE-2023-0888?

Versions L90/U70 and L92/U92 of Bbraun Battery-pack Sp With Wifi Firmware are affected by CVE-2023-0888.

How can CVE-2023-0888 be exploited?

CVE-2023-0888 can be exploited by an authenticated user with access to both the medical device WiFi communication module.

What is the severity of CVE-2023-0888?

CVE-2023-0888 has a severity score of 7.2, which is considered high.

How can I fix CVE-2023-0888?

To fix CVE-2023-0888, it is recommended to apply the security patches provided by Bbraun.

Vulnerability/
CVE-2023-0888

high

7.2

CWE

94 95

13/3/2023

17/3/2023

CVE-2023-0888: Code Injection

Q: What is CVE-2023-0888?

CVE-2023-0888 is an improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web server.

First published: Mon Mar 13 2023(Updated: )

An improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web server in versions L90/U70 and L92/U92 can be used to gain administrative access to the WiFi communication module. An authenticated user, having access to both the medical device WiFi network (such as a biomedical engineering staff member) and the specific B.Braun Battery Pack SP with WiFi web server credentials, could get administrative (root) access on the infusion pump communication module. This could be used as a vector to start further attacks

Credit: productsecurity@bbraun.com

Affected Software	Affected Version	How to fix
Bbraun Battery-pack Sp With Wifi Firmware	<=053l000092
Bbraun Battery-pack Sp With Wifi Firmware	<=054u000092
Bbraun Battery-pack Sp With Wifi

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2023-0888?
CVE-2023-0888 is an improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web server.
Which versions of Bbraun Battery-pack Sp With Wifi Firmware are affected by CVE-2023-0888?
Versions L90/U70 and L92/U92 of Bbraun Battery-pack Sp With Wifi Firmware are affected by CVE-2023-0888.
How can CVE-2023-0888 be exploited?
CVE-2023-0888 can be exploited by an authenticated user with access to both the medical device WiFi communication module.
What is the severity of CVE-2023-0888?
CVE-2023-0888 has a severity score of 7.2, which is considered high.
How can I fix CVE-2023-0888?
To fix CVE-2023-0888, it is recommended to apply the security patches provided by Bbraun.

collector/nvd-index
vendor/bbraun
canonical/bbraun battery-pack sp with wifi firmware
version/bbraun battery-pack sp with wifi firmware/053l000092
version/bbraun battery-pack sp with wifi firmware/054u000092
canonical/bbraun battery-pack sp with wifi

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.