CVE-2020-10044

The CVE-2020-10044 issue affects Siemens SICAM MMU (all versions < V2.05), SICAM SGU (all versions), and SICAM T (all versions

CVE-2020-10043

Siemens SICAM MMU, SICAM SGU, and SICAM T are affected by CVE-2020-10043, a cross-site scripting (XSS) vulnerability in the web server. Affected versions include SICAM MMU versions prior to 2.05, SICAM SGU (all versions), and SICAM T versions prior to 2.18. The issue stems from improper neutraliz...

CVE-2020-10044

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An attacker with access to the network could be able to install specially crafted firmware to the device...

CVE-2020-10042

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. A buffer overflow in various positions of the web application might enable an attacker with access to the web application to execute arbitrary code over the network...

CVE-2020-10045

The CVE affects Siemens SICAM MMU (all versions before 2.05), SICAM SGU (all versions), and SICAM T (all versions before 2.18). Root cause is an error in the challenge-response procedure allowing replay of authentication traffic to reach protected web areas, effectively enabling an authentication...

CVE-2020-10041

CVE-2020-10041 affects Siemens SICAM MMU (all versions < 2.05), SICAM SGU (all versions), and SICAM T (all versions

CVE-2020-10043

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. The web server could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link...

CVE-2020-10039

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An attacker in a privileged network position between a legitimate user and the web server might be able to conduct a Man-in-the-middle attack and gain read and write access to...

CVE-2020-10038

CVE-2020-10038 affects Siemens SICAM MMU (all versions < 2.05), SICAM SGU (all versions), and SICAM T (all versions

CVE-2020-10040

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An attacker with local access to the device might be able to retrieve some passwords in clear text...

CVE-2020-10039

CVE-2020-10039 affects Siemens SICAM MMU (all versions < 2.05), SICAM SGU (all versions), and SICAM T (all versions

CVE-2020-10040

The CVE-2020-10040 entry affects Siemens SICAM MMU (all versions < 2.05), SICAM SGU (all versions), and SICAM T (all versions

CVE-2020-10037

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. By performing a flooding attack against the web server, an attacker might be able to gain read access to the device's memory, possibly revealing confidential information...

CVE-2020-10038

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An attacker with access to the device's web server might be able to execute administrative commands without authentication...

Siemens SICAM MMU, SICAM T, and SICAM SGU

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SICAM MMU, SICAM T and SICAM SGU Vulnerabilities: Out-of-bounds Read, Missing Authentication for Critical Function, Missing Encryption of Sensitive Data, Use of Password Hash wit...

sgu.se XSS vulnerability

Open Bug Bounty ID: OBB-572302 Description| Value ---|--- Affected Website:| sgu.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sgu-leitfaden.de XSS vulnerability

Open Bug Bounty ID: OBB-557597 Description| Value ---|--- Affected Website:| sgu-leitfaden.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...