VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Aug 14, 2020· Updated Jun 17, 2026

CVE-2020-10055

CVE-2020-10055

Description

A vulnerability has been identified in Desigo CC (V4.x), Desigo CC (V3.x), Desigo CC Compact (V4.x), Desigo CC Compact (V3.x). Affected applications are delivered with a 3rd party component (BIRT) that contains a remote code execution vulnerability if the Advanced Reporting Engine is enabled. The vulnerability could allow a remote unauthenticated attacker to execute arbitrary commands on the server with SYSTEM privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Siemens Foundation/Desigo Consumption Control2 versions
    cpe:2.3:a:siemens:desigo_consumption_control:3.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:siemens:desigo_consumption_control:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:siemens:desigo_consumption_control:4.0:*:*:*:*:*:*:*
  • Siemens Foundation/Desigo Consumption Control Compact2 versions
    cpe:2.3:a:siemens:desigo_consumption_control_compact:3.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:siemens:desigo_consumption_control_compact:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:siemens:desigo_consumption_control_compact:4.0:*:*:*:*:*:*:*
  • Siemens Foundation/Desigo Ccllm-fuzzy
    Range: V4.x, V3.x
  • Siemens AG/Desigo CCv5
    Range: V3.x
  • Siemens AG/Desigo CC Compactv5
    Range: V3.x

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.