CVE-2020-25152: Bbraun Datamodule Compactplus

High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days.

A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to hijack web sessions and escalate privileges.

Affected products

• Bbraun Datamodule Compactplus: version a10 only; version a11 only
• Bbraun Spacecom: up to and including l81

Published 2022-04-14. Last modified 2026-06-17.