PT-2020-11873 · Siemens · Sicam Mmu+2

Published 2020-07-14 · Updated 2020-07-15 · CVE-2020-10037

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SICAM MMU versions prior to V2.05 SICAM SGU (affected versions not specified) SICAM T versions prior to V2.18

Description A vulnerability has been identified that could allow an attacker to gain read access to the device's memory by performing a flooding attack against the web server, potentially revealing confidential information.

Recommendations For SICAM MMU versions prior to V2.05, update to version V2.05 or later. For SICAM SGU, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For SICAM T versions prior to V2.18, update to version V2.18 or later.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2020-10037

Affected Products

Sicam Mmu

Sicam Sgu

Sicam T

References · 3

• https://osv.dev/vulnerability/CVE-2020-10037 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10037 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf · Vendor Advisory