Summary
SINAMICS medium voltage products, with telnet enabled on SIMATIC comfort HMI Panels, are affected by a remote access vulnerability that could allow an attacker, under certain conditions, to gain full remote access to the HMI. Note that by default telnet is disabled, but it can be enabled by the system integrator on request.
Siemens has released updates for the affected products, and recommends to update them to the latest version.
Vulnerabilities 1
-
Critical 9.8
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 Update 3a…
Revision history
-
#2
Updated information for SINAMICS SL150, SINAMICS SM150 and SINAMICS SM150i
-
#1
Publication Date
References
-
SSA-752103: Telnet Authentication Vulnerability in SINAMICS Medium Voltage Products - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-752103.pdf
-
SSA-752103: Telnet Authentication Vulnerability in SINAMICS Medium Voltage Products - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-752103.txt