CVE-2021-33885

CVE-2021-33885 is a critical vulnerability affecting B. Braun SpaceCom2 devices prior to version 012U000062, including specific Infusomat and SpaceStation models. This flaw, an Insufficient Verification of Data Authenticity, allows a remote, unauthenticated attacker to inject malicious data due to the absence of cryptographic signatures on critical data sets. With a CVSS score of 9.8 (CRITICAL), successful exploitation grants full system command access and execution, posing a severe risk to device integrity. While there is no evidence of active exploitation or publicly available exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity community.