Siemens Sicam Mmu Firmware vulnerabilities

9 CVEs affecting Siemens Sicam Mmu Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-10045, published 2020-07-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-10042, published 2020-07-14. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A buffer overflow in various positions of the web application might…
CVE-2020-10038, published 2020-07-14. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker with access to the device's web server might be able to…
CVE-2020-10037, published 2020-07-14. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). By performing a flooding attack against the web server, an attacker…
CVE-2020-10045, published 2020-07-14. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An error in the challenge-response procedure could allow an attacker…
CVE-2020-10044, published 2020-07-14. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker with access to the network could be able to install…
CVE-2020-10041, published 2020-07-14. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A stored Cross-Site-Scripting (XSS) vulnerability is present in…
CVE-2020-10043, published 2020-07-14. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). The web server could allow Cross-Site Scripting (XSS) attacks if…
CVE-2020-10039, published 2020-07-14. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker in a privileged network position between a legitimate…
CVE-2020-10040, published 2020-07-14. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker with local access to the device might be able to…