ICSA-21-131-13

icsaUScisa_csaf_ot

Siemens SINAMICS Medium Voltage Products Telnet (Update A)

view advisory published 2021-05-11

Successful exploitation of this vulnerability could allow an attacker to gain full remote access to the HMI.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2020-15798UScritical9.8OT elevated—
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 Update 3a), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 3…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • FixedSINAMICS GH150

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
  • FixedSINAMICS GL150 (with option X30)

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
  • FixedSINAMICS GM150 (with option X30)

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
  • FixedSINAMICS SH150

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
  • FixedSINAMICS SL150

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
  • FixedSINAMICS SM120

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
  • FixedSINAMICS SM150

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
  • FixedSINAMICS SM150i

    As a general security measure, Siemens strongly recommends users protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens ' operational guidelines for industrial security, and follow the recommendations in the product manuals.

    https://cert-portal.siemens.com/operational-guidelines-industrial-security.pdf
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan