CVE-2020-15785

5.3 mediumEPSS 0.6%

Medium (5.3) in siemens siveillance video client. EPSS 0.6% chance of exploitation in the next 30 days.

A vulnerability has been identified in Siveillance Video Client (All versions). In environments where Windows NTLM authentication is enabled the affected client application transmits usernames to the server in cleartext. This could allow an attacker in a privileged network position to obtain valid adminstrator login names and use this information to launch further attacks.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2020-09-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:siveillance_video_client

References

https://cert-portal.siemens.com/productcert/pdf/ssa-770698.pdf
https://us-cert.cisa.gov/ics/advisories/icsa-20-252-05
https://cert-portal.siemens.com/productcert/pdf/ssa-770698.pdf
https://us-cert.cisa.gov/ics/advisories/icsa-20-252-05

Check your stack JSON