ZeroHour

CVE-2020-28396

CVSS 3.1
7.3 high
EPSS
<1%p45
Published
()
Modified
Description

A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V16), SICAM A8000 CP-8021 (All versions < V16), SICAM A8000 CP-8022 (All versions < V16). A web server misconfiguration of the affected device can cause insecure ciphers usage by a user´s browser. An attacker in a privileged position could decrypt the communication and compromise confidentiality and integrity of the transmitted information.

Vendors
siemens
Products
sicam a8000 cp-8000 firmware, sicam a8000 cp-8021 firmware, sicam a8000 cp-8022 firmware
Weakness
CWE-693, CWE-327
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

In the news

No ingested article mentions this CVE yet.