CVE-2020-15786: falha crítica em Siemens SIMATIC HMI Basic Panels 2nd…
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar SIMATIC HMI Comfort Panels+ Monitorar SIMATIC HMI Basic Panels 2nd Generation
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 1.5%
A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions < V16), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions <= V16), SIMATIC HMI Mobile Panels (All versions <= V16), SIMATIC HMI Unified Comfort Panels (All versions <= V16). Affected devices insufficiently block excessive authentication attempts. This could allow a remote attacker to discover user passwords and obtain access to the Sm@rt Server via a brute-force attack.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Siemens · SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants)Siemens · SIMATIC HMI Comfort Panels (incl. SIPLUS variants)Siemens · SIMATIC HMI Mobile PanelsSiemens · SIMATIC HMI Unified Comfort PanelsCVEs relacionadas — Siemens SIMATIC HMI Basic Panels 2nd…
No mesmo produto, das mais perigosas para as menos.