CVE-2020-28396 PUBLISHED CVSS 7.300000190734863 HIGH

A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V16), SICAM A8000 CP-8021 (All versions < V16), SICAM A8000 CP-8022 (All versions < V16). A web server misconfiguration of the affected device can cause insecure ciphers usage by a user´s browser. An attacker in a privileged position could decrypt the communication and compromise confidentiality and integrity of the transmitted information.

EPSS 0.17% · 38.7th percentile

Risk Scores

CVSS v3.1
7.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
EPSS Score
0.17%
38.7th percentile

Affected Products

VendorProductVersions
siemenssicam_a8000_cp-8021_firmware0
SiemensSICAM A8000 CP-8022All versions < V16
siemenssicam_a8000_cp-8000_firmware0
SiemensSICAM A8000 CP-8000All versions < V16
SiemensSICAM A8000 CP-8021All versions < V16
siemenssicam_a8000_cp-8022_firmware0

Timeline

References

Open in Interactive Console →