Vulnerability · Published Oct 13, 2020 · Assigned by siemens
CVE-2020-15797
Medium 6.8
In plain English
A medium-severity privilege mismanagement in DCA Vantage Analyzer from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Official description
A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-2020-15797). Improper Access Control could allow an unauthenticated attacker to escape from the restricted environment (“kiosk mode”) and access the underlying operating system. Successful exploitation requires direct physical access to the system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | DCA Vantage Analyzer | All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-2020-15797 |
Weakness: CWE-269