PT-2020-12234 · Grundfos · Grundfos Cim 500

Published 2020-07-17 · Updated 2020-07-23 · CVE-2020-10605

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Grundfos CIM 500 versions prior to 06.16.00

Description The issue allows the system to respond to unauthenticated requests for password storage files.

Recommendations For versions prior to 06.16.00, update to version 06.16.00 or later to resolve the issue.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2020-10605

Affected Products

Grundfos Cim 500

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-10605 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10605 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-189-01 · Note