VULNERABILITY INTELLIGENCE

CVE-2020-15794

CVSS score4.3 MEDIUM

EPSS probability0.77%

CISA KEVNot currently listed

Published2020-10-15

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

A vulnerability has been identified in Desigo Insight (All versions). Some error messages in the web application show the absolute path to the requested resource. This could allow an authenticated attacker to retrieve additional information about the host system.

Weakness classification

productcert@siemens.com: CWE-200
nvd@nist.gov: CWE-209

Primary references

productcert@siemens.com — Vendor Advisory
productcert@siemens.com — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource