9.8 Critical

CVE-2020-15798 A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl

Description

A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 Update 3a), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 3a), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). Affected devices with enabled telnet service do not require authentication for this service. This could allow a remote attacker to gain full access to the device. (ZDI-CAN-12046)

Affected products and versions

Product	Affected versions	Fixed in
SIMATIC HMI Comfort Panels (incl. SIPLUS variants)	Versions not published
SIMATIC HMI KTP Mobile Panels	Versions not published
SINAMICS GH150	Versions not published
SINAMICS GL150 (with option X30)	Versions not published
SINAMICS GM150 (with option X30)	Versions not published
SINAMICS SH150	Versions not published
SINAMICS SL150	Versions not published
SINAMICS SM120	Versions not published
SINAMICS SM150	Versions not published

Show the other branch

Product	Affected versions	Fixed in
SINAMICS SM150i	Versions not published

References

cert-portal.siemens.com cert-portal.siemens.com
us-cert.cisa.gov us-cert.cisa.gov
cert-portal.siemens.com cert-portal.siemens.com

Timeline

Published February 9, 2021
Last modified June 2, 2026

The 7 CVEs of SIMATIC HMI Comfort Panels (incl. SIPLUS variants) →

CVE-2023-30756 A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl 5.9 Medium CVE-2023-30755 A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl 4.4 Medium CVE-2023-28827 A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl 5.9 Medium CVE-2022-40227 A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl 7.5 High

Track this CVE