Vulnerability Description
A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions < V16), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions <= V16), SIMATIC HMI Mobile Panels (All versions <= V16), SIMATIC HMI Unified Comfort Panels (All versions <= V16). Affected devices insufficiently block excessive authentication attempts. This could allow a remote attacker to discover user passwords and obtain access to the Sm@rt Server via a brute-force attack.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Simatic Hmi Basic Panels 2Nd Generation Firmware | <= 14 |
| Siemens | Simatic Hmi Basic Panels 2Nd Generation | - |
| Siemens | Simatic Hmi Comfort Panels Firmware | All versions |
| Siemens | Simatic Hmi Comfort Panels | - |
| Siemens | Simatic Hmi Mobile Panels Firmware | All versions |
| Siemens | Simatic Hmi Mobile Panels | - |
| Siemens | Simatic Hmi United Comfort Panels Firmware | All versions |
| Siemens | Simatic Hmi United Comfort Panels | - |
Related Weaknesses (CWE)
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-542525.pdfVendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-542525.pdfVendor Advisory
FAQ
What is CVE-2020-15786?
CVE-2020-15786 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions < V16), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions <= V16), S...
How severe is CVE-2020-15786?
CVE-2020-15786 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-15786?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Simatic Hmi Basic Panels 2Nd Generation Firmware, Siemens Simatic Hmi Basic Panels 2Nd Generation, Siemens Simatic Hmi Comfort Panels Firmware, Siemens Simatic Hmi Comfort Panels, Siemens Simatic Hmi Mobile Panels Firmware.