CVE-2021-33883
Last modified
CVE-2021-33883 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A Cleartext Transmission of Sensitive Information vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to obtain sensitive information by snooping on the network traffic. EPSS estimates a 0.83% chance of exploitation in the next 30 days.
Description
A Cleartext Transmission of Sensitive Information vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to obtain sensitive information by snooping on the network traffic. The exposed data includes critical values for a pump's internal configuration.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Bbraun | Spacecom2 | < 012u000062 |
References
- https://www.bbraunusa.com/en.htmBroken Link
- https://www.bbraunusa.com/en.htmBroken Link
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-33883?
How severe is CVE-2021-33883?
How do I fix CVE-2021-33883?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-33852A cross-site scripting (XSS) attack can cause arbitrary code…5.4
- CVE-2021-33853A Cross-Site Scripting (XSS) attack can cause arbitrary code…5.4
- CVE-2021-33879Tencent GameLoop before 4.1.21.90 downloaded updates over an…8.1
- CVE-2021-33880The aaugustin websockets library before 9.1 for Python has a…5.9
- CVE-2021-33881On NXP MIFARE Ultralight and NTAG cards, an attacker can int…4.2
- CVE-2021-33882A Missing Authentication for Critical Function vulnerability…8.6
- CVE-2021-33884An Unrestricted Upload of File with Dangerous Type vulnerabi…9.1
- CVE-2021-33885An Insufficient Verification of Data Authenticity vulnerabil…9.8
- CVE-2021-33886An improper sanitization of input vulnerability in B. Braun …8.8
- CVE-2021-33887Insufficient verification of data authenticity in Peloton TT…6.8
- CVE-2021-33889OpenThread wpantund through 2021-07-02 has a stack-based Buf…6.8
- CVE-2021-33894In Progress MOVEit Transfer before 2019.0.6 (11.0.6), 2019.1…8.8
Are you affected by CVE-2021-33883?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
