PT-2020-19639 · Siemens · Dca Vantage Analyzer+1

Publicado 2020-10-13 · Atualizado 2020-10-29 · CVE-2020-7590

OSV

CVSS v3.1

6.8

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-2020-15797). Affected devices use a hard-coded password to protect the onboard database. This could allow an attacker to read and or modify the onboard database. Successful exploitation requires direct physical access to the device.

Correção

Enumeração de Fraquezas

CWE-259

Identificadores relacionados

CVE-2020-7590

Produtos afetados

Dca Vantage Analyzer

Dca Vantage Analyzer Firmware

Referências · 3

• https://siemens-healthineers.com/support-documentation/security-advisory · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2020-7590 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2020-7590 · Nota de Segurança