CVEvulnerability

CVE-2020-15797

6.8 MEDIUM Published 2020-10-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-10-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-269

Description

A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-2020-15797). Improper Access Control could allow an unauthenticated attacker to escape from the restricted environment (“kiosk mode”) and access the underlying operating system. Successful exploitation requires direct physical access to the system.

Affected configurations

• siemens dca vantage analyzer firmware (< 4.5.0.0)

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References