PT-2020-11878 · Siemens · Sicam Mmu+2

Published 2020-07-14 · Updated 2020-07-15 · CVE-2020-10042

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SICAM MMU versions prior to V2.05 SICAM SGU (affected versions not specified) SICAM T versions prior to V2.18

Description A buffer overflow issue exists in the web application of the affected software, potentially allowing an attacker with access to the web application to execute arbitrary code over the network.

Recommendations For SICAM MMU versions prior to V2.05, update to version V2.05 or later. For SICAM SGU, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For SICAM T versions prior to V2.18, update to version V2.18 or later.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-10042

Affected Products

Sicam Mmu

Sicam Sgu

Sicam T

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-10042 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-10042 · Vendor Advisory