CVE-2020-25245

7.8 highEPSS 0.3%

High (7.8) in siemens digsi 4. EPSS 0.3% chance of exploitation in the next 30 days.

A vulnerability has been identified in DIGSI 4 (All versions < V4.94 SP1 HF 1). Several folders in the %PATH% are writeable by normal users. As these folders are included in the search for dlls, an attacker could place dlls there with code executed by SYSTEM.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2021-02-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:digsi_4

References

https://cert-portal.siemens.com/productcert/pdf/ssa-536315.pdf
https://us-cert.cisa.gov/ics/advisories/icsa-21-040-10
https://cert-portal.siemens.com/productcert/pdf/ssa-536315.pdf
https://us-cert.cisa.gov/ics/advisories/icsa-21-040-10

Check your stack JSON