Headline
CVE-2020-28396
A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V16), SICAM A8000 CP-8021 (All versions < V16), SICAM A8000 CP-8022 (All versions < V16). A web server misconfiguration of the affected device can cause insecure ciphers usage by a user´s browser. An attacker in a privileged position could decrypt the communication and compromise confidentiality and integrity of the transmitted information.
%PDF-1.5 %���� 1 0 obj << /D [2 0 R /XYZ 70.866 771.024 null] >> endobj 3 0 obj << /D [2 0 R /XYZ 70.866 630.026 null] >> endobj 4 0 obj << /D [2 0 R /XYZ 70.866 390.882 null] >> endobj 5 0 obj << /D [2 0 R /XYZ 70.866 319.724 null] >> endobj 6 0 obj << /D [7 0 R /XYZ 85.039 492.064 null] >> endobj 8 0 obj << /D [7 0 R /XYZ 70.866 231.604 null] >> endobj 9 0 obj << /S /GoTo /D [2 0 R /Fit] >> endobj 2 0 obj << /Contents 10 0 R /Type /Page /Resources 11 0 R /Parent 12 0 R /Annots [13 0 R 14 0 R 15 0 R 16 0 R 17 0 R 18 0 R 19 0 R] /MediaBox [0 0 595.276 841.89] >> endobj 13 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109782344) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 500.362 518.276 511.779] >> endobj 15 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109782344) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 458.322 518.276 469.739] >> endobj 17 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109782344) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 416.282 518.276 427.699] >> endobj 19 0 obj << /A << /S /URI /Type /Action /URI (https://www.siemens.com/gridsecurity) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [69.87 72.354 237.948 83.891] >> endobj 11 0 obj << /ProcSet [/PDF /Text] /Font << /F54 20 0 R /F57 21 0 R >> >> endobj 10 0 obj << /Filter /FlateDecode /Length 3018 >> stream x��ZKs�8��W�TU� 0���Iy6��dk*�M12+�ɨ2�~/��h�)yj�Hh4��~���O^��2;��U�I�bI�d�e�0�RNT#A�d6�|���l����*�gi�����w�t9��W%42���)�=w��n�y��W�wS�=��1���zv������H12IWg����9|�m���dk{�&\0$8������g�/*�vh��)!��M�Q��������b�T[@"FDj/���sN����ႈ��1�+����ݢ )�4CB(��<ƿ!&e�]�MQ�f��S#�Ũ��$l�}JA�T�!A�Xc�R��T}���\P��h��� N�Gq��^br�s �i��,>cL�&��8\�Q���3ASA�P�U|l��T���|�qɐf’�-5��Q$�@��[ƈb�������Cֹ��)�nf�x’Hȣ�bT�x����%os�ܹ��4�^��KC�[�������p�b��[O͠7G�6@��Ԝ"�hkfJ�4�i���9bB �i >���s��ffh)��=)�C��a�I|�(��Y�n�qh�:����t/�8��:�s�g܍�ml>��S�%m&�*����shN#�)>’�k3�=’ŀa;�MR�ṅ�܍����j6���?N5��M��hN4�>��}��w��1D��/I��d(-7�%E�y�$�0 z=� p������[ �L��o�^�M�~7���cu7�4����.Wf�D&jA�GE��N!L6�÷)�^R�k)��_Տ�K��I��������e�~@S��eS}�N��9ي}K��#����,�6&�{x�܇yi���)����K晵�I/�� ��.�.�ښ��K��X��K�X�ѓ�E̎j e#4, TbI|d�������!’QI��2k*�|���Q�K�� ǘ7Ę�q{gL���W����1}�b ���!�+rw�%1�XO�dO)���Yv��V̏1n�?�a��������0Ύ҉�I}���Xv�20�������������6����OM6�I��S/B��dk�nKJ�M6�Ҫ:��[��� Ƒ�>�]��#{�gb�w��z>�q���x�M1C����.(@��’ �aw%r���y�D�#� ��/�v@���9 �’��r�ob�@I�A>m���"��!�R�m����>�D��J`��Y��_Aۓsp!4��2�˥Oe���QZ��AJd’���s,z���]>�8 �zϑa�,�>�%-��2��̪�F�Ǻ^W//.�f���YqT���7Um�8�>�u�*��Ex��ru�V��EV\t� ������oyf�}{Ap�4e�?-�����l NN���4��J��Y����ȧ�G�3�9@���Ӂ�!?�D�����-� ��i��H0%NC��4�D{�3����O�q�?ÚwXm-��Ob�п��l�������!j�c’"�$��e�+��s� #�GT� ����l�x��KW/~x�j�\�Q=��’�E 2�j��"Ru2X-��t �F�dP�q�R���oof7�/�1�L�x?�� ��˭�sz�A!n3i.(���?��s���*$��������ei�p��\���H���TXƖ���dS6�������Vy�/l�Q�9��=�`���m(�W��dƮ���s9�o�Xኹ�m2(肗z��ش�����3���7���n�O���jw`ԧ��q[\U��z�$M��/.�b�Oez��j�$>~�z�%S�Qؐ|}�������n�c&~��BT�br }�uC��f���������!��H�(N���q�’���(�@%��������o���p5��ma*%�>��_gnG�.��0��x���y�,]����n�l\��{Ug��}���,�}�ݿ��J?��@?�Z�/��|ĵ�=ixh�&Y:�30�?�|�7�����ˢY��>�z@���[�=�h1P��e����=/�!j�M��"�&�/m�e�������8��W�w����e6u�-spy�=��W0�^Mn����:K�Y P��G���$8�s&ptS�/yD�=p �*����?2矝���8x���-�Yܖ��>xT̤F�_]��cfȻo �M��������,�WYR���\���s�k�51�k���Z&�$���h�X�����������C�j^�6�U�u�N����:���T�B�*�y�K���\8�c���Y�E���2�f�{a�C7��*��}`�p1���L�z;��1�/ �"�Uo8��XDzH��bb�%U+��B�.��]p���CVP��!�����j�C*i������ri^���A�9��A.}�4��i<�=\0�.�s��ĺ xJ��u&�2��X�Oۼ~tO$���ӗ&Fya������/�ԅ�m ��GVAU��Fen�xU���]������jա�e[�0&ݔ��9��2��g��V��N�[���4\#S���T��ZkcI����11W�Y^j�`�-�ͽ���<2C�3�9�}w�a��/^蹾�����xnE�g����=��3w}�[^��E�z��G��P�S��%�"S^�.��ĦU=[�VU8������"�YcV��){43�>��14q?��0~�O�i���3��������^��n�_=7iX2��aP �A�dK����>&E^���y�rg���G�˥M�_�|a�i��>3Y ro7^�y�)s�2��>��j����v�@� �O=Q�b.��������>PÉ�#Z4����f=�$�2ĉ���<��}�’��PZ���nf� �k(��B2o�<ݻ��n_勼�|� }��� F�g���ȥAM8�K�OmN�n������T�֦�p�N������5C�j�9�~�V�W��9’<�1 ��3d����rc s���֔��K����w��הl� endstream endobj 22 0 obj << /D [2 0 R /XYZ 69.866 808.885 null] >> endobj 20 0 obj << /Subtype /Type1 /FirstChar 2 /Type /Font /BaseFont /QKTETC+NimbusSanL-Regu /FontDescriptor 23 0 R /Encoding 24 0 R /LastChar 169 /Widths 25 0 R >> endobj 21 0 obj << /Subtype /Type1 /FirstChar 2 /Type /Font /BaseFont /GVCKGO+NimbusSanL-Bold /FontDescriptor 26 0 R /Encoding 24 0 R /LastChar 117 /Widths 27 0 R >> endobj 28 0 obj << /D [2 0 R /XYZ 70.866 549.187 null] >> endobj 14 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109782344) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 486.918 377.209 499.824] >> endobj 16 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109782344) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 444.877 377.209 457.784] >> endobj 18 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109782344) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 402.837 377.209 415.744] >> endobj 12 0 obj << /Kids [2 0 R 7 0 R] /Type /Pages /Count 2 >> endobj 29 0 obj << /A << /S /URI /Type /Action /URI (https://www.first.org/cvss/) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [131.954 655.734 248.203 667.27] >> endobj 30 0 obj << /A << /S /URI /Type /Action /URI (https://cwe.mitre.org/) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [69.87 566.07 163.926 577.607] >> endobj 31 0 obj << /A << /S /URI /Type /Action /URI (https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [224.029 467.158 508.922 481.105] >> endobj 32 0 obj << /A << /S /URI /Type /Action /URI (https://www.siemens.com/cert/advisories) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [69.87 281.255 251.586 292.672] >> endobj 33 0 obj << /A << /S /URI /Type /Action /URI (https://www.siemens.com/terms_of_use) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [408.782 129.681 525.406 141.098] >> endobj 34 0 obj << /ProcSet [/PDF /Text] /Font << /F54 20 0 R /F72 35 0 R /F57 21 0 R >> >> endobj 7 0 obj << /Contents 36 0 R /Type /Page /Resources 34 0 R /Parent 12 0 R /Annots [29 0 R 30 0 R 31 0 R 32 0 R 33 0 R 37 0 R] /MediaBox [0 0 595.276 841.89] >> endobj 36 0 obj << /Filter /FlateDecode /Length 2896 >> stream xڥ]s�H�ݿB�/��b�00zSd’Ѯ�$9����F��@+�����=� ���{�=3=���3x8��o��w�h[��?X>�}hm+����"M�I^/� �I��/����;�&���,(�AC�y����]\M��Cؽ�����zy���������@�A����Og�����-u8x5;�OI[y�����_3���lʷ�S��g{�h�T��pl�B��Ҷ�C�������`C������w@b}uA`���9�@�2pO�����Ru���gw���’��g�vDK� 2����pz���>=k1�N>⣲&��8�hky_��WG9�d]T|f9"�0׳�ie��>O�6�V&lg �IK���,)��[%hO/i�wl�±��)��G\-xo�dI\�ն�hs��P�� ���Z�Ѯ*�Q�9r��dill�i��e��M"^+�7ɓ��E�߁NDz�����+u�������k�%����t=����̖�>`�*�]�s�Q��-�=�@�����Id*�]�7��b�,p�!��d�k�>�j� Y:�z�e������43� �q�e��qܘu��gT�{Hm��#}�V���0�bd�2͟�`5������P���ه��e��i_�W�]�S9� mA�N�x��+�Q{�~H��ѿ�����1:�}b<��p�6�x4z}}*m�(�mY���i��刏R��� �y�>T�����"��PE��~�vum���O�U��5�xW�_&�_�H���ud����I�w9�S�i���Jכ(�j�C`1�<_ah�����\�6���?.�z�� )��]�"0\�M8l1���P���si�J_����(�JP|9�c?1��F�.8|�q�� W>ӻ�qlk���^����]�s�-�1�� +Z�R�$�(tx�2��a��x��a>y�`��Gb�N�\��� �G�Z�ר�$�B��<ɊM�P�+����aB�&�� �Ie�X�����!�� �" I�-O�RY��.X�qs��+r���E����!���’��������2��6�bGՈC9քv��*J����’#�e�;��� �#��!�_��]MOT������)_�n�J�cL"1��0<�#�T������BU�Z�^���P�)D�ځ�8�0q��0bqz�1�Ka($� Cڮ��| �A!} �S’ҳE(��L?__���Ƥ�k�t�z G8e[ 8�O��{�Ğ<�sי�&\��r4�ɩ.�|.�T/}+"#M�ª�+?�,�ѮdX��gq�����$g�>@s���j��������/h?m����w�jĥ������BC�.6K;P\H