CVE-2021-33885

An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to send the device malicious data that will be used in place of the correct data. This results in full system command access and execution because of the lack of cryptographic signatures on critical data sets.

• CWE-347

• https://www.bbraunusa.com/en.htmBroken Link
• https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/mcafee-enterprise-atr-uncovers-vulnerabilities-in-globally-used-b-braun-infusion-pump/Exploit, Third Party Advisory
• https://www.bbraunusa.com/en.htmBroken Link
• https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/mcafee-enterprise-atr-uncovers-vulnerabilities-in-globally-used-b-braun-infusion-pump/Exploit, Third Party Advisory

Published

Aug 25, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33879Tencent GameLoop before 4.1.21.90 downloaded updates over an…8.1
• CVE-2021-33880The aaugustin websockets library before 9.1 for Python has a…5.9
• CVE-2021-33881On NXP MIFARE Ultralight and NTAG cards, an attacker can int…4.2
• CVE-2021-33882A Missing Authentication for Critical Function vulnerability…8.6
• CVE-2021-33883A Cleartext Transmission of Sensitive Information vulnerabil…7.5
• CVE-2021-33884An Unrestricted Upload of File with Dangerous Type vulnerabi…9.1
• CVE-2021-33886An improper sanitization of input vulnerability in B. Braun …8.8
• CVE-2021-33887Insufficient verification of data authenticity in Peloton TT…6.8
• CVE-2021-33889OpenThread wpantund through 2021-07-02 has a stack-based Buf…6.8
• CVE-2021-33894In Progress MOVEit Transfer before 2019.0.6 (11.0.6), 2019.1…8.8
• CVE-2021-33895ETINET BACKBOX E4.09 and H4.09 mismanages password access co…8.1
• CVE-2021-33896Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Tr…5.3