CVE-2020-28390: vulnerability in Siemens Opcenter Execution Core
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.5%
A vulnerability has been identified in Opcenter Execution Core (V8.2), Opcenter Execution Core (V8.3). The application contains an information leakage vulnerability in the handling of web client sessions. A local attacker who has access to the Web Client Session Storage could disclose the passwords of currently logged-in users.
Affected products
Siemens · Opcenter Execution CoreRelated CVEs — Siemens Opcenter Execution Core
In the same product, most dangerous first.