CVE-2020-15792

MEDIUM 4.3CVE-2020-15792 · Published 15/10/2020 · updated 17/06/2026

In short

CVE-2020-15792 is a MEDIUM (CVSS 4.3) vulnerability affecting desigo insight (siemens).
Chance of exploitation in the next 30 days (EPSS): 1.00%, higher than 62.8% of all vulnerabilities.
Fix: update to 6.0 or later.

Package	Affected versions	Patched versions
desigo insight siemens	`= 6.0< 6.0`	`6.0`

Description

A vulnerability has been identified in Desigo Insight (All versions). The web service does not properly apply input validation for some query parameters in a reserved area. This could allow an authenticated attacker to retrieve data via a content-based blind SQL injection attack.

References

cert-portal.siemens.com/productcert/pdf/ssa-226339.pdf · Vendor Advisory
us-cert.cisa.gov/ics/advisories/icsa-20-287-05 · Third Party Advisory

More vulnerabilities in desigo insight

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free