Lucene search

CVE-2020-15798

🗓️ 09 Feb 2021 17:13:15Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 39 Views

A vulnerability in SIMATIC HMI Comfort/KTP Mobile Panels & SINAMICS Devices (CVE-2020-15798)

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 7
Prion	Authentication flaw	9 Feb 202117:15	–	prion
ICS	Siemens SIMATIC HMI Comfort Panels & SIMATIC HMI KTP Mobile Panels	28 Jan 202100:00	–	ics
ICS	Siemens SINAMICS Medium Voltage Products Telnet (Update A)	11 May 202100:00	–	ics
Zero Day Initiative	Siemens Comfort Panel Telnet Service Missing Authentication Remote Code Execution Vulnerability	4 Feb 202100:00	–	zdi
CNVD	Siemens Simatic Hmi License Issue Vulnerability	30 Jan 202100:00	–	cnvd
Cvelist	CVE-2020-15798	9 Feb 202115:38	–	cvelist
NVD	CVE-2020-15798	9 Feb 202117:15	–	nvd

Nvd

Node

siemens simatic_hmi_comfort_panels_firmwareRange<16.0

siemens simatic_hmi_comfort_panels_firmwareMatch16.0-

siemens simatic_hmi_comfort_panels_firmwareMatch16.0update1

siemens simatic_hmi_comfort_panels_firmwareMatch16.0update2

siemens simatic_hmi_comfort_panels_firmwareMatch16.0update3

AND

siemens simatic_hmi_comfort_panelsMatch-

Node

siemens simatic_hmi_ktp_mobile_panels_firmwareRange<16.0

siemens simatic_hmi_ktp_mobile_panels_firmwareMatch16.0-

siemens simatic_hmi_ktp_mobile_panels_firmwareMatch16.0update1

siemens simatic_hmi_ktp_mobile_panels_firmwareMatch16.0update2

siemens simatic_hmi_ktp_mobile_panels_firmwareMatch16.0update3

AND

siemens simatic_hmi_ktp_mobile_panelsMatch-

Node

siemens sinamics_gh150_firmwareMatch-

AND

siemens sinamics_gh150Match-

Node

siemens sinamics_gl150_firmwareMatch-

AND

siemens sinamics_gl150Match-

Node

siemens sinamics_gm150_firmwareMatch-

AND

siemens sinamics_gm150Match-

Node

siemens sinamics_sh150_firmwareMatch-

AND

siemens sinamics_sh150Match-

Node

siemens sinamics_sl150_firmwareMatch-

AND

siemens sinamics_sl150Match-

Node

siemens sinamics_sm150_firmwareMatch-

AND

siemens sinamics_sm150Match-

Node

siemens sinamics_sm120_firmwareMatch-

AND

siemens sinamics_sm120Match-

Node

siemens sinamics_sm150i_firmwareMatch-

AND

siemens sinamics_sm150iMatch-

[
  {
    "product": "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V16 Update 3a"
      }
    ]
  },
  {
    "product": "SIMATIC HMI KTP Mobile Panels",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V16 Update 3a"
      }
    ]
  },
  {
    "product": "SINAMICS GH150",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SINAMICS GL150 (with option X30)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SINAMICS GM150 (with option X30)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SINAMICS SH150",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SINAMICS SL150",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SINAMICS SM120",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SINAMICS SM150",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SINAMICS SM150i",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-21-033-02
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-520004.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-752103.pdf

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Feb 2021 17:15Current

9.5High risk

Vulners AI Score9.5

CVSS29.3

CVSS39.8

EPSS0.01177

CWE-306