CVSS 3.1
7.3 highCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:NCVE-2020-28396
A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V16), SICAM A8000 CP-8021 (All versions < V16), SICAM A8000 CP-8022 (All versions < V16). A web server misconfiguration of the affected device can cause insecure ciphers usage by a user´s browser. An attacker in a privileged position could decrypt the communication and compromise confidentiality and integrity of the transmitted information.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-327, CWE-693
- Published
- Modified
- Record from
- the NVD, synced
Affected
- siemens:sicam_a8000_cp-8000_firmware
- siemens:sicam_a8000_cp-8021_firmware
- siemens:sicam_a8000_cp-8022_firmware