Skip to content
OpenAdvisories
Unscored CVE-2021-31337 EUVD-2021-18247GHSA-hwxw-fmr7-f2c3

The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow…

Published Jun 28, 2021 · Updated Aug 3, 2024 · Assigned by siemens

Description

The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote attacker to gain access to the device if the service is enabled. Telnet is disabled by default on the SINAMICS Medium Voltage Products (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).

Affected products

VendorProductAffectedFixed
— SINAMICS Medium Voltage Products SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions —

References