CVE-2021-33886
Last modified
CVE-2021-33886 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. An improper sanitization of input vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to gain user-level command-line access by passing a raw external string straight through to printf statements. EPSS estimates a 0.83% chance of exploitation in the next 30 days.
Description
An improper sanitization of input vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to gain user-level command-line access by passing a raw external string straight through to printf statements. The attacker is required to be on the same network as the device.
Metrics
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Bbraun | Spacecom2 | < 012u000062 |
References
- https://www.bbraunusa.com/en.htmBroken Link
- https://www.bbraunusa.com/en.htmBroken Link
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-33886?
How severe is CVE-2021-33886?
How do I fix CVE-2021-33886?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-33880The aaugustin websockets library before 9.1 for Python has a…5.9
- CVE-2021-33881On NXP MIFARE Ultralight and NTAG cards, an attacker can int…4.2
- CVE-2021-33882A Missing Authentication for Critical Function vulnerability…8.6
- CVE-2021-33883A Cleartext Transmission of Sensitive Information vulnerabil…7.5
- CVE-2021-33884An Unrestricted Upload of File with Dangerous Type vulnerabi…9.1
- CVE-2021-33885An Insufficient Verification of Data Authenticity vulnerabil…9.8
- CVE-2021-33887Insufficient verification of data authenticity in Peloton TT…6.8
- CVE-2021-33889OpenThread wpantund through 2021-07-02 has a stack-based Buf…6.8
- CVE-2021-33894In Progress MOVEit Transfer before 2019.0.6 (11.0.6), 2019.1…8.8
- CVE-2021-33895ETINET BACKBOX E4.09 and H4.09 mismanages password access co…8.1
- CVE-2021-33896Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Tr…5.3
- CVE-2021-33897A buffer overflow in Synthesia before 10.7.5567, when a non-…5.5
Are you affected by CVE-2021-33886?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST