Siemens SIMATIC HMI Comfort Panels & SIMATIC HMI KTP Mobile Panels
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-15798US | critical9.8OT erhöht | — | ||
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 Update 3a), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 3… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-520004: Telnet Authentication Vulnerability in SIMATIC HMI Comfort Panels - HTML Versionself
- ICS Advisory ICSA-21-033-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-033-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationSIMATIC HMI Comfort Panels (incl.'SIPLUS variants)
Disable telnet on the HMI Panels if enabled. Note: By default telnet is disabled.
- MitigationSIMATIC HMI KTP Mobile Panels
Disable telnet on the HMI Panels if enabled. Note: By default telnet is disabled.
- BehobenSIMATIC HMI Comfort Panels (incl.'SIPLUS variants)
Update to V16 Update 3a or later version
- BehobenSIMATIC HMI KTP Mobile Panels
Update to V16 Update 3a or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan