9.8
Critical
CVE-2020-15798 A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl
Description
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 Update 3a), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 3a), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). Affected devices with enabled telnet service do not require authentication for this service. This could allow a remote attacker to gain full access to the device. (ZDI-CAN-12046)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMATIC HMI Comfort Panels (incl. SIPLUS variants) | Versions not published | |
| SIMATIC HMI KTP Mobile Panels | Versions not published | |
| SINAMICS GH150 | Versions not published | |
| SINAMICS GL150 (with option X30) | Versions not published | |
| SINAMICS GM150 (with option X30) | Versions not published | |
| SINAMICS SH150 | Versions not published | |
| SINAMICS SL150 | Versions not published | |
| SINAMICS SM120 | Versions not published | |
| SINAMICS SM150 | Versions not published |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| SINAMICS SM150i | Versions not published |
Other CVEs of SIMATIC HMI Comfort Panels (incl. SIPLUS variants)
The 7 CVEs of SIMATIC HMI Comfort Panels (incl. SIPLUS variants) →
CVE-2023-30756
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl
5.9
Medium
CVE-2023-30755
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl
4.4
Medium
CVE-2023-28827
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl
5.9
Medium
CVE-2022-40227
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl
7.5
High