Lucene search
PRIOn knowledge basePRION:CVE-2020-15792HistoryOct 15, 2020 - 7:15 p.m.
Sql injection
2020-10-1519:15:00
PRIOn knowledge base
www.prio-n.com
1
A vulnerability has been identified in Desigo Insight (All versions). The web service does not properly apply input validation for some query parameters in a reserved area. This could allow an authenticated attacker to retrieve data via a content-based blind SQL injection attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| desigo_insight | eq | 6.0 sp2 | |
| desigo_insight | eq | 6.0 sp3 | |
| desigo_insight | eq | 6.0 sp5 | |
| desigo_insight | eq | 6.0 | |
| desigo_insight | lt | 6.0 |
Related
cve
cve
CVE-2020-15792
2020-10-15 19:15:12
nvd
nvd
CVE-2020-15792
2020-10-15 19:15:12
cvelist
cvelist
CVE-2020-15792
2020-10-15 18:45:33
ics
ics
Siemens Desigo Insight
2020-10-13 12:00:00