CVE-2020-15797
Medium
Description
A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-2020-15797). Improper Access Control could allow an unauthenticated attacker to escape from the restricted environment (“kiosk mode”) and access the underlying operating system. Successful exploitation requires direct physical access to the system.
SeverityMedium
CVSS6.8
Exploit probability—
ProductSiemens Dca Vantage Analyzer Firmware
PublishedOct 13, 2020
First seenOct 13, 2020
Weakness typeCWE-269Improper privilege management
How to fix
Update
- siemens dca_vantage_analyzer_firmware4.5.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens dca_vantage_analyzer_firmware | v < 4.5.0.0 | 4.5.0.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.