Security Advisory

CVE-2020-7590

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-10-13 15:30:19
Last updated 2024-08-04 09:33:19
Assigner siemens
State PUBLISHED

Description

A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-2020-15797). Affected devices use a hard-coded password to protect the onboard database. This could allow an attacker to read and or modify the onboard database. Successful exploitation requires direct physical access to the device.