PatchTheCVECVE-2023-0888: An improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embed
CVE-2023-0888 is a medium-severity flaw (CVSS 4.9) affecting battery-pack sp with wifi firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web server in versions L90/U70 and L92/U92 can be used to gain administrative access to the WiFi communication module. An authenticated user, having access to both the medical device WiFi network (such as a biomedical engineering staff member) and the specific B.Braun Battery Pack SP with WiFi web server credentials, could get adminis
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-0888?
battery-pack sp with wifi firmware: upgrade to newer than 054u000092. Exact commands for each OS are on this page.
Is CVE-2023-0888 being exploited?
CVE-2023-0888 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-0888 affect?
CVE-2023-0888 affects battery-pack sp with wifi firmware. Severity is medium (CVSS 4.9). An improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web server in versions L90/U70 and L92/U92 can be used to gain administrative access to the WiFi communication module. An auth
How urgent is CVE-2023-0888?
Priority 29/100. No elevated risk signals yet.