QwikSec

Security Database

CVE

CWE

Training

CVE-2020-15785

Published: Sep 9, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

A vulnerability has been identified in Siveillance Video Client (All versions). In environments where Windows NTLM authentication is enabled the affected client application transmits usernames to the server in cleartext. This could allow an attacker in a privileged network position to obtain valid adminstrator login names and use this information to launch further attacks.

Vendor	Product	Versions
Siemens AG	Siveillance Video Client	affected `All versions`

Weaknesses (CWE)

References

https://cert-portal.siemens.com/productcert/pdf/ssa-770698.pdf

x_refsource_MISC

https://us-cert.cisa.gov/ics/advisories/icsa-20-252-05

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.