CVE-2020-28392

Siemens SIMARIS configuration is affected by CVE-2020-28392: all versions prior to 4.0.1 install with incorrect default permissions on the application folder and subfolders, enabling persistence or privilege escalation for users with elevated credentials. The ICS advisory confirms the vulnerabili...