Описание
A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An error in the challenge-response procedure could allow an attacker to replay authentication traffic and gain access to protected areas of the web application.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.05 (исключая)
Одновременно
cpe:2.3:o:siemens:sicam_mmu_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sicam_mmu:-:*:*:*:*:*:*:*
Конфигурация 2
Одновременно
cpe:2.3:o:siemens:sicam_sgu_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sicam_sgu:-:*:*:*:*:*:*:*
Конфигурация 3Версия до 2.18 (исключая)
Одновременно
cpe:2.3:o:siemens:sicam_t_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sicam_t:-:*:*:*:*:*:*:*
EPSS
Процентиль: 56%
0.00331
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-294
CWE-294
Связанные уязвимости
github
больше 3 лет назад
A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An error in the challenge-response procedure could allow an attacker to replay authentication traffic and gain access to protected areas of the web application.
EPSS
Процентиль: 56%
0.00331
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-294
CWE-294