medium4.3
CVE-2020-15792
A vulnerability has been identified in Desigo Insight (All versions).
Impact
A vulnerability has been identified in Desigo Insight (All versions). The web service does not properly apply input validation for some query parameters in a reserved area. This could allow an authenticated attacker to retrieve data via a content-based blind SQL injection attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Desigo Insight | before 6.0 Version 6.0 |