CVE-2020-7590
Medium
Description
A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-2020-15797). Affected devices use a hard-coded password to protect the onboard database. This could allow an attacker to read and or modify the onboard database. Successful exploitation requires direct physical access to the device.
SeverityMedium
CVSS6.8
Exploit probability—
ProductSiemens Dca Vantage Analyzer Firmware
PublishedOct 13, 2020
First seenOct 13, 2020
Weakness typeCWE-259CWE-259
How to fix
Update
- siemens dca_vantage_analyzer_firmware4.5.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens dca_vantage_analyzer_firmware | v < 4.5.0.0 | 4.5.0.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.