by Kastro
Paper/Archive/CVE-2025-3321

CVE-2025-3321

B. Braun Melsungen AG OnlineSuite — Use of Hard-coded Credentials in OnlineSuite

EPSS 0.2%CVSS 9.4
critical.is priorityof 100
29
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 5.8.058 × 201.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A predefined administrative account is not documented and cannot be deactivated. This account cannot be misused from the network, only by local users on the server.

Affected

ProductAffectedFixed inSource
OnlineSuite3.0–CNA

Scores by source

B.Braun (CNA)9.4CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refbbraun.com/productsecurity