Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2020-15786

A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions < V16), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions < V16), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions <= V16), SIMATIC HMI Mobile Panels (All versions <= V16), SIMATIC HMI Unified Comfort Panels (All versions <= V16). Affected devices insufficiently block excessive authentication attempts. This could allow a remote attacker to discover user passwords and obtain access to the Sm@rt Server via a brute-force attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants)

  • All versions < V16affected

Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants)

  • All versions <= V16affected

Siemens SIMATIC HMI Mobile Panels

  • All versions <= V16affected

Siemens SIMATIC HMI Unified Comfort Panels

  • All versions <= V16affected

References