An improper sanitization of input vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to gain user-level command-line access by passing a raw external string straight through to printf statements. The attacker is required to be on the same network as the device.
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
| Link | Tags |
|---|---|
| https://www.bbraunusa.com/en.htm | broken link |
| https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/mcafee-enterprise-atr-uncovers-vulnerabilities-in-globally-used-b-braun-infusion-pump/ | third party advisory exploit |