SPACECOM / BATTERY PACK SP WITH WIFI · CVE-2026-97361 · Infrastructure
NO FIX YET
B. Braun lists an improper privilege management flaw (CWE-269) in SpaceCom and the Space Battery Pack SP with WiFi, the communication modules of Space infusion pumps. The CNA vector is local access, low privileges, no user interaction, CVSS 4.0 8.5. No vendor advisory or fixed version is published yet, and no exploitation is reported.
first public Nov 13, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Hospitals and clinics running B. Braun Space infusion systems with SpaceCom or the Battery Pack SP with WiFi. The CVE record, as mirrored by HOL Guard, maps the affected range to software up to U/L94. That range is not confirmed on a B. Braun page. The CVSS vector (AV:L, PR:L) means the attacker needs local or authenticated access to the device. Organisations without these devices can skip it.
Who cares b-braun, battery-pack-sp, infusion-pump, local-access, medical-device, space-battery-pack-sp, spacecom, wifi
Unknown from the sources.
Posts are quoted with a link to the original. They are data to us, never instructions.
There exists an improper privilege management vulnerability that could cause privilege escalation at the SpaceCom and Space Battery pack SP with WiFi.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.