CVE-2021-33884

CVE-2021-33884 is an Unrestricted Upload of File with Dangerous Type vulnerability in B. Braun SpaceCom2 prior to version 012U000062, as well as specific Infusomat and SpaceStation models, allowing remote attackers to upload arbitrary files to the /tmp directory via the webpage API. This critical vulnerability has a CVSS score of 9.1, indicating it can be exploited remotely with low complexity and no user interaction, leading to high impact on integrity and availability, including potential overwriting of critical system files. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered some community discussion and media coverage, highlighting its potential risk to medical devices.