VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 9, 2021· Updated Jun 17, 2026

CVE-2020-28392

CVE-2020-28392

Description

A vulnerability has been identified in SIMARIS configuration (All versions < V4.0.1). During installation to default target folder, incorrect permissions are configured for the application folder and subfolders which could allow an attacker to gain persistence or potentially escalate privileges should a user with elevated credentials log onto the machine.

Affected products

3
  • Siemens Foundation/Simaris Configurationllm-fuzzy3 versions
    <V4.0.1+ 2 more
    • (no CPE)range: <V4.0.1
    • (no CPE)range: All versions < V4.0.1
    • cpe:2.3:a:siemens:simaris_configuration:*:*:*:*:*:*:*:*range: <4.0.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.