CVE-2020-15793

MEDIUM 5.4CVE-2020-15793 · Published 15/10/2020 · updated 17/06/2026

In short

CVE-2020-15793 is a MEDIUM (CVSS 5.4) vulnerability affecting desigo insight (siemens).
Chance of exploitation in the next 30 days (EPSS): 0.74%, higher than 54.6% of all vulnerabilities.
Fix: update to 6.0 or later.

Package	Affected versions	Patched versions
desigo insight siemens	`= 6.0< 6.0`	`6.0`

Description

A vulnerability has been identified in Desigo Insight (All versions). The device does not properly set the X-Frame-Options HTTP Header which makes it vulnerable to Clickjacking attacks. This could allow an unauthenticated attacker to retrieve or modify data in the context of a legitimate user by tricking that user to click on a website controlled by the attacker.

References

cert-portal.siemens.com/productcert/pdf/ssa-226339.pdf · Vendor Advisory
us-cert.cisa.gov/ics/advisories/icsa-20-287-05 · Third Party Advisory

More vulnerabilities in desigo insight

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free