Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Bbraun

First CVE: Jun 30, 2017Active for: 9 yearsTotal CVEs: 21
35.1
VTI Score
Medium

B. Braun manufactures a portfolio of infusion pumps, administration systems, and clinical networked devices spanning products such as Infusomat, SpaceCom, and DataModule platforms, which are deployed in hospital environments where reliability and security directly impact patient safety. Vulnerabilities affecting the vendor skew toward serious outcomes, with a meaningful share reaching critical severity, and recur across this medical-device portfolio through weakness classes including improper cryptographic signature verification, path traversal, open redirects, active debug code, and cleartext transmission of sensitive data—patterns consistent with legacy embedded medical software and networked clinical infrastructure. The exposure in medical devices reflects particular risk given the difficulty of patching deployed systems in healthcare settings and the potential for these flaws to compromise drug-delivery precision and clinical-workflow integrity. Defenders managing B. Braun infrastructure should prioritize network segmentation, inventory affected device models and firmware versions, and coordinate with their biomedical teams on patch availability and deployment constraints; live severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
21
Total CVEs
More Total CVEs than 96% of tracked vendors
0.4
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 4% of tracked vendors
7.5
Avg CVSS Score
Higher Avg CVSS Score than 57% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Bbraun over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 30, 2017
9 years ago
Most Recent CVE
Mar 13, 2023
1,229 days ago

Products(10 total)

Top CVEs

Signals from CVEs in this vendor scope (21 CVEs).

21 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2021-33885CRITICAL
An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to send the device malicious data
Aug 25, 20219.830NONO
CVE-2020-25172CRITICAL
A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files.
Nov 6, 20209.829NONO
CVE-2020-25150HIGH
A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with servi
Apr 14, 20228.828NONO
CVE-2020-25152HIGH
A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 al
Apr 14, 20228.126NONO
CVE-2021-33884CRITICAL
An Unrestricted Upload of File with Dangerous Type vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows remote attackers to upload any files to the /tmp directory of the
Aug 25, 20219.126NONO
CVE-2020-25162HIGH
A XPath injection vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows unauthenticated remot
Apr 14, 20227.525NONO
CVE-2021-33886HIGH
An improper sanitization of input vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to gain user-level command-line access by passing
Aug 25, 20218.825NONO
CVE-2021-33882HIGH
A Missing Authentication for Critical Function vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to reconfigure the device from an unknown source bec
Aug 25, 20218.625NONO
CVE-2020-25164HIGH
A vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to recover user credentials
Apr 14, 20227.524NONO
CVE-2020-25156HIGH
Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in possession of cryptogr
Apr 14, 20227.224NONO
View all 21 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products21 CVEs
24%
57%
14%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local5 (23.8%)
Network15 (71.4%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network1 (4.8%)
Attack Complexity
Low21 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None15 (71.4%)
Unknown0 (0.0%)
Required6 (28.6%)
Privileges Required
Low4 (19.0%)
High3 (14.3%)
None14 (66.7%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (21 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Bbraun.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Bbraun — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Bbraun's Products

View all 3 CNAs →

Top CWEs