Patch days / October 2020

Siemens ProductCERT Patch Day — October 2020

Tuesday, 13 October 2020

Vulnerabilities: 6
Critical: 0
High: 0
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

All vulnerabilities 6

Unscored6 Show

Unscored
CVE-2020-15792 A vulnerability has been identified in Desigo Insight (All versions). The web service does not properly apply input validation for some query parameters in a r…
Unscored
CVE-2020-15793 A vulnerability has been identified in Desigo Insight (All versions). The device does not properly set the X-Frame-Options HTTP Header which makes it vulnerabl…
Unscored
CVE-2020-15794 A vulnerability has been identified in Desigo Insight (All versions). Some error messages in the web application show the absolute path to the requested resour…
Unscored
CVE-2020-15797 A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running sof…
Unscored
CVE-2020-7590 A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running sof…
Unscored
CVE-2020-7591 A vulnerability has been identified in SIPORT MP (All versions < 3.2.1). Vulnerable versions of the device could allow an authenticated attacker to impersonate…
EPSS 1.5%