VULNERABILITY INTELLIGENCE
CVE-2020-25170
CVSS score7.8 HIGH
EPSS probability0.98%
CISA KEVNot currently listed
Published2020-11-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-1236
Primary references
- ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource