CVE-2020-15781

A vulnerability has been identified in SICAM WEB firmware for SICAM A8000 RTUs All versions V05.30. The login screen does not sufficiently sanitize input, which enables an attacker to generate specially crafted log messages. If an unsuspecting victim views the log messages via the web browser,...

Siemens SICAM A8000 RTUs Improper Neutralization of Input During Web Page Generation (CVE-2020-15781)

A vulnerability has been identified in SICAM WEB firmware for SICAM A8000 RTUs All versions V05.30. The login screen does not sufficiently sanitize input, which enables an attacker to generate specially crafted log messages. If an unsuspecting victim views the log messages via the web browser,...

CVE-2020-15781

CVE-2020-15781 affects Siemens SICAM A8000 SICAM WEB firmware prior to version 05.30. The login page fails to adequately sanitize input, allowing an attacker to generate specially crafted log messages that, when viewed in a browser, may be interpreted and executed as code (XSS). Impacted product:...

Siemens SICAM A8000 RTUs

1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SICAM A8000 Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could compromise the confidentiality, integrity, and availability of the web application...