9.8
CVSSv3

CVE-2020-15786

Published: 09/09/2020 Updated: 08/06/2021
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions < V16), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions <= V16), SIMATIC HMI Mobile Panels (All versions <= V16), SIMATIC HMI Unified Comfort Panels (All versions <= V16). Affected devices insufficiently block excessive authentication attempts. This could allow a remote malicious user to discover user passwords and obtain access to the Sm@rt Server via a brute-force attack.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

siemens simatic hmi basic panels 2nd generation firmware

siemens simatic hmi comfort panels firmware

siemens simatic hmi mobile panels firmware

siemens simatic hmi united comfort panels firmware