A vulnerability has been identified in SIMATIC HMI Basic Panels...

6.5 CVSS

Vulnerability Description

A vulnerability has been identified in SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants) (All versions), SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC HMI KTP700F Mobile Arctic (All versions), SIMATIC HMI Mobile Panels 2nd Generation (All versions), SIMATIC WinCC Runtime Advanced (All versions). Unencrypted communication between the configuration software and the respective device could allow an attacker to capture potential plain text communication and have access to sensitive information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-7592

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Siemens AG

View All →

CVE-2020-7593

A vulnerability has been identified in LOGO! 8 BM (incl....

Critical 9.8

CVE-2020-7584

A vulnerability has been identified in SIMATIC S7-200 SMART CPU...

High 7.5

CVE-2020-7583

A vulnerability has been identified in Automation License Manager 5...

High 7.8

CVE-2020-7579

A vulnerability has been identified in Spectrum Power™ 5 (All...

Medium 6.1

CVE-2020-15790

A vulnerability has been identified in Spectrum Power 4 (All...

Medium 5.3

Affected Vendor

Siemens AG

View all reports →

Affected Software

SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants), SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants), SIMATIC HMI Comfort Panels (incl. SIPLUS variants), SIMATIC HMI KTP700F Mobile Arctic, SIMATIC HMI Mobile Panels 2nd Generation, SIMATIC WinCC Runtime Advanced

Vulnerable Versions:

All versions