CVE-2020-10055
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
A vulnerability has been identified in Desigo CC (V4.x), Desigo CC (V3.x), Desigo CC Compact (V4.x), Desigo CC Compact (V3.x). Affected applications are delivered with a 3rd party component (BIRT) that contains a remote code execution vulnerability if the Advanced Reporting Engine is enabled. The vulnerability could allow a remote unauthenticated attacker to execute arbitrary commands on the server with SYSTEM privileges.
Affected Platforms (CPE)
📦
Siemens
Desigo Consumption Control
= 3.0📦
Siemens
Desigo Consumption Control
= 4.0📦
Siemens
Desigo Consumption Control Compact
= 3.0📦
Siemens