Published: 28/06/2021 Updated: 02/07/2021

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote malicious user to gain access to the device if the service is enabled. Telnet is disabled by default on the SINAMICS Medium Voltage Products (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).

Vulnerable Product	Search on Vulmon	Subscribe to Product
siemens sinamics_sl150_firmware
siemens sinamics_sm150_firmware
siemens sinamics_sm150i_firmware

An embarrassingly simple wrapper for trivy + k8s

trivyal_pursuit If you enjoy chasing down probably-unexploitable-but-you-can-never-be-sure vulnerabilities in Kubernetes, then you've found something Install git clone git@githubcom:alex-hamlin/trivyal_pursuitgit cd trivyal_pursuit gem install bundler bundle install Authentication If you can authenticate with kubectl, you're all set Run For a list of full comma

CWE-306 https://us-cert.cisa.gov/ics/advisories/icsa-21-131-04 https://nvd.nist.gov https://github.com/alex-hamlin/trivyal_pursuit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-31337

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect