Siemens Polarion Subversion Webclient

🗓️ 08 Sep 2020 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 28 Views

Siemens Polarion Subversion Webclient has vulnerabilities in script-related HTML tags and CSRF. Exploitation could lead to state-changing operations. Siemens states no fix as it is no longer supported. Workaround includes avoiding opening unknown links while using the webclient

Reporter	Title	Published	Views	Family All 13
CNVD	Siemens Polarion Subversion Webclient Cross-Site Request Forgery Vulnerability	9 Sep 202000:00	–	cnvd
CNVD	Siemens Polarion Subversion Webclient Cross-Site Scripting Vulnerability	9 Sep 202000:00	–	cnvd
CVE	CVE-2020-15788	9 Sep 202018:11	–	cve
CVE	CVE-2020-15789	9 Sep 202018:11	–	cve
Cvelist	CVE-2020-15788	9 Sep 202018:11	–	cvelist
Cvelist	CVE-2020-15789	9 Sep 202018:11	–	cvelist
EUVD	EUVD-2020-7771	7 Oct 202500:30	–	euvd
EUVD	EUVD-2020-7772	7 Oct 202500:30	–	euvd
NVD	CVE-2020-15788	9 Sep 202019:15	–	nvd
NVD	CVE-2020-15789	9 Sep 202019:15	–	nvd

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-436520.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2020/icsa-20-252-08.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-20-252-08
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

08 Sep 2020 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 25.8

CVSS 3.18.1

EPSS0.00359