SSA-752103: Telnet Authentication Vulnerability in SINAMICS Medium Voltage Products
SINAMICS medium voltage products, with telnet enabled on SIMATIC comfort HMI Panels, are affected by a remote access vulnerability that could allow an attacker, under certain conditions, to gain full remote access to the HMI. Note that by default telnet is disabled, but it can be enabled by the system integrator on request. Siemens has released updates for the affected products, and recommends to update them to the latest version.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-15798US | critical9.8OT elevated | — | ||
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 Update 3a), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 3… | ||||
references
External citations — patches, advisories, analysis.
- SSA-752103: Telnet Authentication Vulnerability in SINAMICS Medium Voltage Products - CSAF Versionself
- SSA-752103: Telnet Authentication Vulnerability in SINAMICS Medium Voltage Products - PDF Versionself
- SSA-752103: Telnet Authentication Vulnerability in SINAMICS Medium Voltage Products - TXT Versionself
remediations (16)
- MitigationSINAMICS GH150
As only HMI image versions < V16 Update 3a are affected, please update the HMI Panel images as included in your installation of SINAMICS GH150 to V16 Update 4 or later version
- MitigationSINAMICS GL150 (with option X30)
As only HMI image versions < V16 Update 3a are affected, please update the HMI Panel images as included in your installation of SINAMICS GL150 (with option X30) to V16 Update 4 or later version
- MitigationSINAMICS GM150 (with option X30)
As only HMI image versions < V16 Update 3a are affected, please update the HMI Panel images as included in your installation of SINAMICS GM150 (with option X30) to V16 Update 4 or later version
- MitigationSINAMICS SH150
As only HMI image versions < V16 Update 3a are affected, please update the HMI Panel images as included in your installation of SINAMICS SH150 to V16 Update 4 or later version
- MitigationSINAMICS SL150
As only SIMATIC HMI image versions < V15 SP1 Update 6 are affected, please update the HMI Panel image as included in your installation of SINAMICS SL150 to V15 SP1 Update 6 or later version
- MitigationSINAMICS SM120
As only HMI image versions < V16 Update 3a are affected, please update the HMI Panel images as included in your installation of SINAMICS SM120 to V16 Update 4 or later version
- MitigationSINAMICS SM150
As only SIMATIC HMI image versions < V15 SP1 Update 6 are affected, please update the HMI Panel image as included in your installation of SINAMICS SM150 to V15 SP1 Update 6 or later version
- MitigationSINAMICS SM150i
As only SIMATIC HMI image versions < V15 SP1 Update 6 are affected, please update the HMI Panel image as included in your installation of SINAMICS SM150i to V15 SP1 Update 6 or later version
- No fix availableSINAMICS GH150
Currently no remediation is available
- No fix availableSINAMICS GL150 (with option X30)
Currently no remediation is available
- No fix availableSINAMICS GM150 (with option X30)
Currently no remediation is available
- No fix availableSINAMICS SH150
Currently no remediation is available
- No fix availableSINAMICS SL150
Currently no remediation is available
- No fix availableSINAMICS SM120
Currently no remediation is available
- No fix availableSINAMICS SM150
Currently no remediation is available
- No fix availableSINAMICS SM150i
Currently no remediation is available
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan