Medium severity4.3NVD Advisory· Published Oct 15, 2020· Updated Jun 17, 2026
CVE-2020-15794
CVE-2020-15794
Description
A vulnerability has been identified in Desigo Insight (All versions). Some error messages in the web application show the absolute path to the requested resource. This could allow an authenticated attacker to retrieve additional information about the host system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:siemens:desigo_insight:*:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:siemens:desigo_insight:*:*:*:*:*:*:*:*range: <6.0
- cpe:2.3:a:siemens:desigo_insight:6.0:-:*:*:*:*:*:*
- cpe:2.3:a:siemens:desigo_insight:6.0:sp2:*:*:*:*:*:*
- cpe:2.3:a:siemens:desigo_insight:6.0:sp3:*:*:*:*:*:*
- cpe:2.3:a:siemens:desigo_insight:6.0:sp5:*:*:*:*:*:*
- (no CPE)range: All versions
- (no CPE)range: All versions
Patches
Vulnerability mechanics
References
2- cert-portal.siemens.com/productcert/pdf/ssa-226339.pdfnvdVendor Advisory
- us-cert.cisa.gov/ics/advisories/icsa-20-287-05nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.