CVE-2021-33886

CVE-2021-33886 is an improper input sanitization vulnerability in B. Braun SpaceCom2 and related infusion pump products, allowing a remote unauthenticated attacker to gain user-level command-line access. The vulnerability has a high CVSS score of 8.8, indicating a severe impact with high confidentiality, integrity, and availability risks, requiring the attacker to be on the same network. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has received some community discussion and media coverage, highlighting its potential risk to medical devices.