CVE-2020-15798

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-15798
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 Update 3a), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 3a), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). Affected devices with enabled telnet service do not require authentication for this service. This could allow a remote attacker to gain full access to the device. (ZDI-CAN-12046)

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.3 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-520004.pdf Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-752103.pdf Patch Vendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-033-02 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:16.0:-:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:16.0:update1:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:16.0:update2:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:16.0:update3:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_hmi_comfort_panels:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_firmware:16.0:-:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_firmware:16.0:update1:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_firmware:16.0:update2:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_firmware:16.0:update3:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:siemens:sinamics_gh150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_gh150:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:siemens:sinamics_gl150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_gl150:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:siemens:sinamics_gm150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_gm150:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:siemens:sinamics_sh150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_sh150:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:siemens:sinamics_sl150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_sl150:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:siemens:sinamics_sm150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_sm150:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:siemens:sinamics_sm120_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_sm120:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:siemens:sinamics_sm150i_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_sm150i:-:*:*:*:*:*:*:*
History

19 Oct 2022, 19:39

Type Values Removed Values Added
References (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-752103.pdf - (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-752103.pdf - Patch, Vendor Advisory
CPE cpe:2.3:o:siemens:sinamics_gh150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_gh150:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_sh150:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:sinamics_sh150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_sl150:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_sm150i:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_gl150:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:sinamics_sm150i_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:sinamics_sm150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_sm120:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_sm150:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:sinamics_gl150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:sinamics_gm150:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:sinamics_gm150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:sinamics_sl150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:sinamics_sm120_firmware:-:*:*:*:*:*:*:*

10 Aug 2021, 11:15

Type Values Removed Values Added
Summary A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 Update 3a), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 3a). Affected devices with enabled telnet service do not require authentication for this service. This could allow a remote attacker to gain full access to the device. (ZDI-CAN-12046) A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 Update 3a), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 3a), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). Affected devices with enabled telnet service do not require authentication for this service. This could allow a remote attacker to gain full access to the device. (ZDI-CAN-12046)
Information

Published : 2021-02-09 17:15

Updated : 2024-02-04 21:23

NVD link : CVE-2020-15798

Mitre link : CVE-2020-15798

CVE.ORG link : CVE-2020-15798

JSON object : View

Products Affected

siemens

  • sinamics_sh150_firmware
  • sinamics_sm150i_firmware
  • sinamics_sm120
  • sinamics_sl150
  • sinamics_sm150i
  • simatic_hmi_comfort_panels
  • sinamics_sl150_firmware
  • simatic_hmi_ktp_mobile_panels_firmware
  • sinamics_gm150_firmware
  • sinamics_gl150
  • sinamics_gh150
  • sinamics_gh150_firmware
  • simatic_hmi_ktp_mobile_panels
  • sinamics_gl150_firmware
  • sinamics_sm150
  • sinamics_gm150
  • sinamics_sm150_firmware
  • sinamics_sm120_firmware
  • sinamics_sh150
  • simatic_hmi_comfort_panels_firmware
CWE
CWE-306

Missing Authentication for Critical Function