VDB

CVE-2020-15785

CVE-2020-15785 PUBLISHED

Reported by siemens · Published September 9, 2020

A vulnerability has been identified in Siveillance Video Client (All versions). In environments where Windows NTLM authentication is enabled the affected client application transmits usernames to the server in cleartext. This could allow an attacker in a privileged network position to obtain valid adminstrator login names and use this information to launch further attacks.

Affected products

VendorProductVersions
Siemens AGSiveillance Video ClientAll versions
Siemens AGSiveillance Video Client*

Timeline

  • Sep 8, 2020 CVE Published
  • Apr 14, 2021 EPSS Score (30 in total, the first dated here)
  • Nov 21, 2024 CVE Updated
  • Jun 1, 2026 Security Advisory
  • Sep 4, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2020-15785
vulnetix vdb fixes CVE-2020-15785

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2020-15785/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

  • x_refsource_MISC
  • x_refsource_MISC
Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›