{"id":"CVE-2026-97361","kind":"vulnerability","aliases":["CVE-2026-97361"],"related":[],"title":"B. Braun SpaceCom and Battery Pack SP with WiFi: privilege escalation via improper privilege management","description":"There exists an improper privilege management vulnerability that could cause privilege escalation at the SpaceCom and Space Battery pack SP with WiFi.","summary":"B. Braun lists an improper privilege management flaw (CWE-269) in SpaceCom and the Space Battery Pack SP with WiFi, the communication modules of Space infusion pumps. The CNA vector is local access, low privileges, no user interaction, CVSS 4.0 8.5. No vendor advisory or fixed version is published yet, and no exploitation is reported.","severity":"high","cvss":8.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"SpaceCom / Battery Pack SP with WiFi","fixed":[],"affected":"<= U94 (US) / L94 (rest of world), per CVE record mirror, unconfirmed","ecosystem":"vendor"}],"ecosystems":[],"tags":["b-braun","battery-pack-sp","infrastructure","infusion-pump","local-access","medical-device","space-battery-pack-sp","spacecom","wifi"],"not_affected_if":[],"how_to_check":"Find SpaceCom and Battery Pack SP with WiFi units in your inventory and read their software version. A version at or below U94 (US) or L94 (rest of world) falls in the range the CVE record gives, which is unconfirmed. Check bbraun.com/productsecurity and bbraunusa.com/productsecurity for the vendor bulletin. Keep the devices off the internet and on an isolated, firewalled network segment, as B. Braun advised for earlier Space advisories.","fix":null,"status":"open","published_at":"2026-11-13T18:17:50+00:00","first_seen_at":"2026-11-13T18:49:31+00:00","triaged_at":"2026-11-13T18:51:23+00:00","updated_at":"2026-11-13T18:53:41+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-13T18:51:23Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"SpaceCom Space Battery pack SP with WiFi: privilege escalation via improper privilege management","impact":"high","summary":"A flaw in improper privilege management in the SpaceCom and Space Battery pack SP with WiFi lets a user gain higher privileges than intended. The sources do not describe the exact access path or what the attacker can do after escalating.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["spacecom","space-battery-pack-sp","wifi"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker gains elevated privileges on the device","analyst_note":"Find the vendor advisory and the affected firmware versions; check NVD at https://nvd.nist.gov/vuln/detail/CVE-2026-97361 for the CVSS vector and any fixed version.","how_to_check":"unknown","plain_action":"","product_name":"SpaceCom Space Battery pack SP with WiFi","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000674,"input_tokens":4498,"output_tokens":448,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the vendor advisory and the affected firmware versions; check NVD at https://nvd.nist.gov/vuln/detail/CVE-2026-97361 for the CVSS vector and any fixed version.","search":"'-2026':17A,20A '-269':61B '-97361':18A,21A '4.0':91B '8.5':92B 'access':41B,84B 'advisori':95B 'b':1A,29B,52B 'b-braun':28B 'batteri':5A,32B,47B,67B,124C 'battery':23A 'battery-pack-sp':31B 'braun':2A,30B,53B 'caus':116C 'cna':80B 'communic':73B 'could':115C 'cve':16A,19A 'cvss':90B 'cwe':60B 'devic':44B 'escal':11A,118C 'exist':108C 'exploit':104B 'fix':97B 'flaw':59B 'improp':13A,56B,110C 'infrastructur':35B 'infus':37B,77B 'infusion-pump':36B 'interact':89B 'list':54B 'local':40B,83B 'local-access':39B 'low':85B 'manag':15A,58B,112C 'medic':43B 'medical-devic':42B 'modul':74B 'pack':6A,24A,33B,48B,68B,125C 'privileg':10A,14A,57B,86B,111C,117C 'publish':100B 'pump':38B,78B 'report':106B 'sp':7A,25A,34B,49B,69B,126C 'space':46B,66B,76B,123C 'space-battery-pack-sp':45B 'spacecom':3A,22A,50B,63B,121C 'user':88B 'vector':81B 'vendor':94B 'version':98B 'via':12A 'vulner':113C 'wifi':9A,27A,51B,71B,128C 'with':26A 'yet':101B","nicknames":[],"mitigations":[],"who_affected":"Hospitals and clinics running B. Braun Space infusion systems with SpaceCom or the Battery Pack SP with WiFi. The CVE record, as mirrored by HOL Guard, maps the affected range to software up to U/L94. That range is not confirmed on a B. Braun page. The CVSS vector (AV:L, PR:L) means the attacker needs local or authenticated access to the device. Organisations without these devices can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["batterypackspwithwifi","spacecombatterypackspwithwifi"],"ptokens":["battery","pack","sp","spacecom","wifi","with"],"labels":["batterypacksp","bbraun","high","infrastructure","infusionpump","localaccess","medicaldevice","spacebatterypacksp","spacecom","wifi"],"campaign_type":null,"search_a":"'-2026':17A,20A '-97361':18A,21A 'b':1A 'batteri':5A 'battery':23A 'braun':2A 'cve':16A,19A 'escal':11A 'improp':13A 'manag':15A 'pack':6A,24A 'privileg':10A,14A 'sp':7A,25A 'spacecom':3A,22A 'via':12A 'wifi':9A,27A 'with':26A","search_b":"'-269':61B '4.0':91B '8.5':92B 'access':41B,84B 'advisori':95B 'b':29B,52B 'b-braun':28B 'batteri':32B,47B,67B 'battery-pack-sp':31B 'braun':30B,53B 'cna':80B 'communic':73B 'cvss':90B 'cwe':60B 'devic':44B 'exploit':104B 'fix':97B 'flaw':59B 'improp':56B 'infrastructur':35B 'infus':37B,77B 'infusion-pump':36B 'interact':89B 'list':54B 'local':40B,83B 'local-access':39B 'low':85B 'manag':58B 'medic':43B 'medical-devic':42B 'modul':74B 'pack':33B,48B,68B 'privileg':57B,86B 'publish':100B 'pump':38B,78B 'report':106B 'sp':34B,49B,69B 'space':46B,66B,76B 'space-battery-pack-sp':45B 'spacecom':50B,63B 'user':88B 'vector':81B 'vendor':94B 'version':98B 'wifi':51B,71B 'yet':101B","search_c":"'batteri':124C 'caus':116C 'could':115C 'escal':118C 'exist':108C 'improp':110C 'manag':112C 'pack':125C 'privileg':111C,117C 'sp':126C 'space':123C 'spacecom':121C 'vulner':113C 'wifi':128C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T18:17:50+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"productsecurity@bbraun.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-97361","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97361","severity":null,"published_at":"2026-11-13T18:17:50+00:00","modified_at":"2026-11-13T18:17:50+00:00","first_seen_at":"2026-11-13T18:49:31+00:00","fetched_at":"2026-11-13T18:49:31+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-97361:3920","url":"https://hol.org/guard/security/cves/CVE-2026-97361-improper-privilege-management-on-b-braun-spacecom","severity":null,"published_at":"2026-11-13T18:53:41+00:00","modified_at":"2026-11-13T18:53:41+00:00","first_seen_at":"2026-11-13T18:53:41+00:00","fetched_at":"2026-11-13T18:53:41+00:00","note":"NVD page is empty. Only a CVE-record mirror (HOL) gives the range <=U/L94. No 2026 B. Braun bulletin found; the latest on its product-security index is 10/2026 for APEX/PINNACLE. Nothing verified. Revisit when B. Braun publishes.","cites":["https://hol.org/guard/security/cves/CVE-2026-97361-improper-privilege-management-on-b-braun-spacecom"]}],"documents":[{"id":148658,"url":"https://hol.org/guard/security/cves/CVE-2026-97361-improper-privilege-management-on-b-braun-spacecom","title":"HOL Guard: CVE-2026-97361 record mirror (CVE List V5)","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}