What is CVE-2020-25170?

CVE-2020-25170 is a high-severity vulnerability in Bbraun Onlinesuite Application Package, classified under Improper Neutralization of Formula Elements in a CSV File. CVSS score: 7.8/10. Published 2020-11-06.

How severe is CVE-2020-25170?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Bbraun Onlinesuite Application Package

CVE-2020-25170

An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export.

EPSS: 0.010 (58.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Bbraun Onlinesuite_application_package
B. Braun Melsungen Ag Onlinesuite — versions AP

Weakness classification (CWE)

CWE-1236 — Improper Neutralization of Formula Elements in a CSV File

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-25170?: CVE-2020-25170 is a high-severity vulnerability in Bbraun Onlinesuite Application Package, classified under Improper Neutralization of Formula Elements in a CSV File. CVSS score: 7.8/10. Published 2020-11-06.
How severe is CVE-2020-25170?: High severity. CVSS v3 base score is 7.8 out of 10.