CVE-2020-10055
14.08.2020, 16:15
A vulnerability has been identified in Desigo CC (V4.x), Desigo CC (V3.x), Desigo CC Compact (V4.x), Desigo CC Compact (V3.x). Affected applications are delivered with a 3rd party component (BIRT) that contains a remote code execution vulnerability if the Advanced Reporting Engine is enabled. The vulnerability could allow a remote unauthenticated attacker to execute arbitrary commands on the server with SYSTEM privileges.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| siemens | desigo_consumption_control | 3.0 |
| siemens | desigo_consumption_control | 4.0 |
| siemens | desigo_consumption_control_compact | 3.0 |
| siemens | desigo_consumption_control_compact | 4.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| siemens | desigo_cc | 4.0 ≤ 𝑥 < 5.0 | CNA |
| siemens | desigo_cc | 3.0 ≤ 𝑥 < 4.0 | CNA |