CVE-2020-10043

MEDIUM

SICAM MMU < 2.05, SICAM SGU, SICAM T < 2.18 - Cross-Site Scripting via Malicious Link

Title source: llm

Description

A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). The web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf

Scores

CVSS v3 6.1

EPSS 0.0036

EPSS Percentile 58.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-80 CWE-79

Status published

Products (3)

siemens/sicam_mmu_firmware < 2.05

siemens/sicam_sgu_firmware

siemens/sicam_t_firmware < 2.18

Published Jul 14, 2020

Tracked Since Feb 18, 2026