CVE-2020-10040 Information disclosure in SICAM MMU
Local attackers can retrieve clear-text passwords from Siemens SICAM MMU, SGU, and T devices, exposing sensitive credentials.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-10040?
CVE-2020-10040 is a medium-severity vulnerability in Siemens AG SICAM MMU, published on 14 Jul 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker with local access to the device might be able to retrieve some passwords in clear text.
Weakness: CWE-916
Which versions are affected by CVE-2020-10040?
It affects 3 products.
Products include Siemens Sicam Mmu Firmware, Siemens Sicam Sgu Firmware, Siemens Sicam T Firmware.
How do I fix CVE-2020-10040?
No fix has been published for CVE-2020-10040 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-10040 being exploited?
There is no known exploitation of CVE-2020-10040 in the wild and no public exploit code.
Other vulnerabilities in Siemens AG SICAM MMU
Sources
Also known as GHSA-j8wq-fvx8-fqfh.