Siemens SINAMICS Medium Voltage Products Telnet (Update A)

🗓️ 11 May 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 54 Views

Siemens SINAMICS Medium Voltage Products Telnet (Update A) CVSS v3 8.1, Exploitable remotely, Missing Authentication for Critical Function, Gain full remote access to the HMI, Telnet service not requiring authentication, CVE-2020-15798 assigned, HMI image versions prior to v16 Update 3a affected, Telnet should be disabled, SINAMICS MV industrial security guidelines, Protect network access, Configure environment according to Siemens’ operational guidelines for industrial security

Reporter	Title	Published	Views	Family All 12
CNNVD	Siemens Simatic Hmi 访问控制错误漏洞	28 Jan 202100:00	–	cnnvd
CNVD	Siemens Simatic Hmi License Issue Vulnerability	30 Jan 202100:00	–	cnvd
CVE	CVE-2020-15798	9 Feb 202115:38	–	cve
Cvelist	CVE-2020-15798	9 Feb 202115:38	–	cvelist
EUVD	EUVD-2020-7781	7 Oct 202500:30	–	euvd
ICS	Siemens SIMATIC HMI Comfort Panels & SIMATIC HMI KTP Mobile Panels	28 Jan 202100:00	–	ics
NVD	CVE-2020-15798	9 Feb 202117:15	–	nvd
OSV	CVE-2020-15798	9 Feb 202117:15	–	osv
Prion	Authentication flaw	9 Feb 202117:15	–	prion
Positive Technologies	PT-2021-9833 · Siemens · Sinamics Sl150 +6	4 Feb 202100:00	–	ptsecurity

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-131-13.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-131-13
us-cert	www.us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
us-cert	www.us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B

11 May 2021 00:00Current

9.9High risk

Vulners AI Score9.9

CVSS 29.3

CVSS 3.19.8

EPSS0.01669

SSVC