CVE-2020-7592

🗓️ 14 Jul 2020 13:18:05Reported by siemensType

Vulnerability in SIMATIC HMI Panels allows unencrypted communication

Reporter	Title	Published	Views	Family All 7
CNVD	Information Disclosure Vulnerability in Multiple Siemens Products	15 Jul 202000:00	–	cnvd
Cvelist	CVE-2020-7592	14 Jul 202013:18	–	cvelist
EUVD	EUVD-2020-28717	7 Oct 202500:30	–	euvd
ICS	Siemens SIMATIC HMI Panels	14 Jul 202000:00	–	ics
NVD	CVE-2020-7592	14 Jul 202014:15	–	nvd
Prion	Design/Logic Flaw	14 Jul 202014:15	–	prion
RedhatCVE	CVE-2020-7592	22 May 202516:49	–	redhatcve

NVD

Node

siemens simatic_hmi_basic_panels_1st_generation

siemens simatic_hmi_basic_panels_2nd_generation

siemens simatic_wincc_runtime_advanced

Node

siemens simatic_hmi_comfort_panels_firmware

AND

siemens simatic_hmi_comfort_panelsMatch-

Node

siemens simatic_hmi_ktp700f_mobile_arctic_firmware

AND

siemens simatic_hmi_ktp700f_mobile_arcticMatch-

Node

siemens simatic_hmi_mobile_panels_2nd_generation_firmware

AND

siemens simatic_hmi_mobile_panels_2nd_generationMatch-

[
  {
    "product": "SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants)",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants)",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC HMI KTP700F Mobile Arctic",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC HMI Mobile Panels 2nd Generation",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC Runtime Advanced",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-20-196-04
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-364335.pdf

21 Nov 2024 05:37Current

6.3Medium risk

Vulners AI Score6.3

CVSS 23.3

CVSS 3.16.5

EPSS0.00033

CWE-319