Siemens SIMATIC HMI Panels
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-7592US | medium6.5OT elevated | — | ||
A vulnerability has been identified in SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants) (All versions), SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variant… | ||||
references
External citations — patches, advisories, analysis.
- SSA-364335: Clear Text Transmission Vulnerability on SIMATIC HMI Panels - HTML Versionself
- ICS Advisory ICSA-20-196-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-196-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationSIMATIC HMI Basic Panels 1st Generation (incl.'SIPLUS variants)
As much as possible, connect the Engineering Station (or device with the WinCC Engineering software) directly to the HMI without using any network device in between.
- MitigationSIMATIC HMI Basic Panels 2nd Generation (incl.'SIPLUS variants)
As much as possible, connect the Engineering Station (or device with the WinCC Engineering software) directly to the HMI without using any network device in between.
- MitigationSIMATIC HMI Comfort Panels (incl.'SIPLUS variants)
As much as possible, connect the Engineering Station (or device with the WinCC Engineering software) directly to the HMI without using any network device in between.
- MitigationSIMATIC HMI KTP700F Mobile Arctic
As much as possible, connect the Engineering Station (or device with the WinCC Engineering software) directly to the HMI without using any network device in between.
- MitigationSIMATIC HMI Mobile Panels 2nd Generation
As much as possible, connect the Engineering Station (or device with the WinCC Engineering software) directly to the HMI without using any network device in between.
- MitigationSIMATIC WinCC Runtime Advanced
As much as possible, connect the Engineering Station (or device with the WinCC Engineering software) directly to the HMI without using any network device in between.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan