PT-2020-11879 · Siemens · Sicam Mmu+2

Published 2020-07-14 · Updated 2020-07-15 · CVE-2020-10043

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SICAM MMU versions prior to V2.05 SICAM SGU (affected versions not specified) SICAM T versions prior to V2.18

Description A security issue has been identified that could allow Cross-Site Scripting (XSS) attacks. This occurs when unsuspecting users are tricked into accessing a malicious link, potentially allowing attackers to execute malicious scripts on the web server.

Recommendations For SICAM MMU versions prior to V2.05, update to version V2.05 or later to resolve the issue. For SICAM SGU, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For SICAM T versions prior to V2.18, update to version V2.18 or later to resolve the issue.

XSS

Weakness Enumeration

CWE-80

CWE-79

Related Identifiers

CVE-2020-10043

Affected Products

Sicam Mmu

Sicam Sgu

Sicam T

References · 3

• https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-10043 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10043 · Security Note