CVE-2020-15785

EPSS 0.6%CWE-319

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.6%KEV nãoPoC —Patch —

Ciclo de vida

09 set 2020Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability has been identified in Siveillance Video Client (All versions). In environments where Windows NTLM authentication is enabled the affected client application transmits usernames to the server in cleartext. This could allow an attacker in a privileged network position to obtain valid adminstrator login names and use this information to launch further attacks.

Produtos afetados

Siemens AG · Siveillance Video Client

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://cert-portal.siemens.com/productcert/pdf/ssa-770698.pdf https://us-cert.cisa.gov/ics/advisories/icsa-20-252-05