QwikSec

Security Database

CVE

CWE

Training

CVE-2020-15794

Published: Oct 15, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

A vulnerability has been identified in Desigo Insight (All versions). Some error messages in the web application show the absolute path to the requested resource. This could allow an authenticated attacker to retrieve additional information about the host system.

Vendor	Product	Versions
Siemens	Desigo Insight	affected `All versions`

Weaknesses (CWE)

References

https://cert-portal.siemens.com/productcert/pdf/ssa-226339.pdf

x_refsource_MISC

https://us-cert.cisa.gov/ics/advisories/icsa-20-287-05

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.