Siemens SIMATIC HMI Comfort Panels & SIMATIC HMI KTP Mobile Panels

🗓️ 28 Jan 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 42 Views

Siemens SIMATIC HMI Comfort Panels & SIMATIC HMI KTP Mobile Panels affected by Missing Authentication for Critical Function vulnerability, allowing remote access. CVSS v3 8.1. Telnet service to be disabled

Reporter	Title	Published	Views	Family All 12
CNNVD	Siemens Simatic Hmi 访问控制错误漏洞	28 Jan 202100:00	–	cnnvd
CNVD	Siemens Simatic Hmi License Issue Vulnerability	30 Jan 202100:00	–	cnvd
CVE	CVE-2020-15798	9 Feb 202115:38	–	cve
Cvelist	CVE-2020-15798	9 Feb 202115:38	–	cvelist
EUVD	EUVD-2020-7781	7 Oct 202500:30	–	euvd
ICS	Siemens SINAMICS Medium Voltage Products Telnet (Update A)	11 May 202100:00	–	ics
NVD	CVE-2020-15798	9 Feb 202117:15	–	nvd
OSV	CVE-2020-15798	9 Feb 202117:15	–	osv
Prion	Authentication flaw	9 Feb 202117:15	–	prion
Positive Technologies	PT-2021-9833 · Siemens · Sinamics Sl150 +6	4 Feb 202100:00	–	ptsecurity

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-520004.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-033-02.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-033-02
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

28 Jan 2021 00:00Current

9.9High risk

Vulners AI Score9.9

CVSS 29.3

CVSS 3.19.8

EPSS0.01669

SSVC