CVE-2020-10040

Medium

Description

A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker with local access to the device might be able to retrieve some passwords in clear text.

SeverityMedium
CVSS5.5
Exploit probability—
ProductSiemens Sicam Mmu Firmware
PublishedJul 14, 2020
First seenJul 14, 2020
Weakness typeCWE-916CWE-916

How to fix

Update
  • siemens sicam_mmu_firmware2.05 or later
  • siemens sicam_t_firmware2.18 or later

Affected products

ProductAffected versionsFixed in
siemens sicam_mmu_firmwarev < 2.052.05
siemens sicam_sgu_firmwareNo range specified—
siemens sicam_t_firmwarev < 2.182.18

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2020-10040 · Siemens Sicam Mmu Firmware · Dark Radar