7.5

CVE-2020-10037

A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). By performing a flooding attack against the web server, an attacker might be able to gain read access to the device's memory, possibly revealing confidential information.

Data is provided by the National Vulnerability Database (NVD)
Siemens ≫ Sicam Mmu Firmware Version < 2.05
   Siemens ≫ Sicam Mmu Version-
Siemens ≫ Sicam Sgu Firmware Version-
   Siemens ≫ Sicam Sgu Version-
Siemens ≫ Sicam T Firmware Version < 2.18
   Siemens ≫ Sicam T Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.32% 0.522
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.