CVE-2020-15785

State: Published
Severity: Not scored
Published: Sep 9, 2020
Updated: Aug 4, 2024
Reserved: Jul 15, 2020

Description

A vulnerability has been identified in Siveillance Video Client (All versions). In environments where Windows NTLM authentication is enabled the affected client application transmits usernames to the server in cleartext. This could allow an attacker in a privileged network position to obtain valid adminstrator login names and use this information to launch further attacks.

Scores

The record has no CVSS score.

Weaknesses

CWE-319 Cleartext Transmission of Sensitive Information

Affected Products

Product	Versions
Siveillance Video ClientSiemens AG	All versionsAffected

References

https://cert-portal.siemens.com/productcert/pdf/ssa-770698.pdf
https://us-cert.cisa.gov/ics/advisories/icsa-20-252-05

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.