Skip to content
OpenAdvisories
Medium ICSA-20-252-06 2 CVEs

Siemens SIMATIC HMI Products (Update A)

Published Sep 8, 2020 · Updated May 6, 2025 · Revision 5

Vendor: Siemens Product: SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) Product: SIMATIC HMI Comfort Panels (incl. SIPLUS variants) Product: SIMATIC HMI Mobile Panels Product: SIMATIC HMI Unified Comfort Panels

Summary

SIMATIC HMI Products are affected by two vulnerabilities that could allow a remote attacker to discover user passwords and obtain access to the Sm@rt Server via a brute-force attack.

Siemens has released updates for the affected products and recommends to update to the latest versions. Siemens also suggests following the listed mitigations for the Unified Comfort Panels.

Vulnerabilities 2

Revision history

  1. #5

    Revision - Fixing typos

  2. #4

    Added patch link for Unified Comfort Panel, and mitigation for components that will not be remediated due to limitations.

  3. #3

    Added patch links for SIMATIC HMI Basic (2nd generation), Comfort (including SIPLUS variants) and Mobile Panels

  4. #2

    Added mitigations and fix dates

  5. #1

    Publication Date

References