Siemens (CVE-2020-25245) (deprecated)

Plugin deprecated because digsi is not detectable in this way This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/03/10. Deprecated because digsi i...

CVE-2020-25245

CVE-2020-25245 affects Siemens DIGSI 4 (all versions before v4.94 SP1 HF 1). The root cause is that several folders in %PATH% are writable by normal users and are included in DLL search paths, enabling a local attacker to place DLLs that execute code with SYSTEM privileges. Impact described acros...

Siemens DIGSI 4

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: DIGSI 4 Vulnerability: Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a low privileged attacker to execute arbitrary code with SYSTEM...