Lucene search
ABBCVELIST:CVE-2020-11641HistoryOct 15, 2020 - 2:58 p.m.
CVE-2020-11641 SiteManager Local File Inclusion Vulnerability
2020-10-1514:58:27
CWE-552
ABB
www.cve.org
3
cve-2020-11641
sitemanager
local file inclusion
b&r
sensitive files
authentication
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
26.4%
A local file inclusion vulnerability in B&R SiteManager versions <9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances.
CNA Affected
[
{
"product": "SiteManager",
"vendor": "B&R",
"versions": [
{
"lessThan": "9.2.620236042",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
prion
prion
Remote file inclusion
2020-10-15 15:15:00
nvd
nvd
CVE-2020-11641
2020-10-15 15:15:10
cve
cve
CVE-2020-11641
2020-10-15 15:15:10
thn
thn
Critical Flaws Discovered in Popular Industrial Remote Access Systems
2020-10-01 08:27:00
ics
ics
B&R Automation SiteManager and GateManager
2020-09-30 12:00:00
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
26.4%
Related for CVELIST:CVE-2020-11641