CVE-2020-28396

Katalog CVE

CVSS 7.3 · High EPSS 0,57%

Kerentanan Protection Mechanism Failure pada siemens sicam a8000 cp-8000 firmware, siemens sicam a8000 cp-8021 firmware +1 lainnya. Skor CVSS 3.1 7.3 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V16), SICAM A8000 CP-8021 (All versions < V16), SICAM A8000 CP-8022 (All versions < V16). A web server misconfiguration of the affected device can cause insecure ciphers usage by a user´s browser. An attacker in a privileged position could decrypt the communication and compromise confidentiality and integrity of the transmitted information.

Rincian

Terbit di NVD

14 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.3 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-693: Protection Mechanism Failure
CWE-327: Use of a Broken or Risky Cryptographic Algorithm

EPSS (30 hari)

0,57% peluang dieksploitasi; lebih tinggi dari 45,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cert-portal.siemens.com/productcert/pdf/ssa-415783.pdf advisory vendor
• https://www.zerodayinitiative.com/advisories/ZDI-21-062/ not applicable