Siemens SIMATIC HMI Comfort Panels & SIMATIC HMI KTP Mobile Panels
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-15798US | critical9.8OT elevated | — | ||
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 Update 3a), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 3… | ||||
references
External citations — patches, advisories, analysis.
- SSA-520004: Telnet Authentication Vulnerability in SIMATIC HMI Comfort Panels - HTML Versionself
- ICS Advisory ICSA-21-033-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-033-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationSIMATIC HMI Comfort Panels (incl.'SIPLUS variants)
Disable telnet on the HMI Panels if enabled. Note: By default telnet is disabled.
- MitigationSIMATIC HMI KTP Mobile Panels
Disable telnet on the HMI Panels if enabled. Note: By default telnet is disabled.
- FixedSIMATIC HMI Comfort Panels (incl.'SIPLUS variants)
Update to V16 Update 3a or later version
- FixedSIMATIC HMI KTP Mobile Panels
Update to V16 Update 3a or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan