Vulnerability Description
A vulnerability has been identified in SIMATIC HMI Unified Comfort Panels (All versions <= V16). Affected devices insufficiently validate authentication attempts as the information given can be truncated to match only a set number of characters versus the whole provided string. This could allow a remote attacker to discover user passwords and obtain access to the Sm@rt Server via a brute-force attack.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Simatic Hmi United Comfort Panels Firmware | All versions |
| Siemens | Simatic Hmi United Comfort Panels | - |
Related Weaknesses (CWE)
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-542525.pdfVendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-542525.pdfVendor Advisory
FAQ
What is CVE-2020-15787?
CVE-2020-15787 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A vulnerability has been identified in SIMATIC HMI Unified Comfort Panels (All versions <= V16). Affected devices insufficiently validate authentication attempts as the information given can be trunca...
How severe is CVE-2020-15787?
CVE-2020-15787 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-15787?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Simatic Hmi United Comfort Panels Firmware, Siemens Simatic Hmi United Comfort Panels.