CVE-2020-15792CWE-89

CVE-2020-15792: vulnerability in Siemens Desigo Insight

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
A vulnerability has been identified in Desigo Insight (All versions). The web service does not properly apply input validation for some query parameters in a reserved area. This could allow an authenticated attacker to retrieve data via a content-based blind SQL injection attack.
Affected products
Siemens · Desigo Insight
Related CVEs — Siemens Desigo Insight

In the same product, most dangerous first.