Man-in-the-Middle Vulnerability in SICAM Products by Siemens

CVE-2020-10039

Summary

A vulnerability exists in Siemens SICAM products that may allow an attacker positioned within a privileged network to perform a Man-in-the-Middle attack. This could lead to unauthorized read and write access to sensitive data being transmitted between the legitimate user and the web server. Users of SICAM MMU versions below 2.05, SICAM SGU, and SICAM T versions below 2.18 are particularly affected, emphasizing the need for immediate upgrades to mitigate this serious risk.

References