CVE-2020-7592

EPSS 0.3%CWE-319

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

14 jul 2020Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability has been identified in SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants) (All versions), SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC HMI KTP700F Mobile Arctic (All versions), SIMATIC HMI Mobile Panels 2nd Generation (All versions), SIMATIC WinCC Runtime Advanced (All versions). Unencrypted communication between the configuration software and the respective device could allow an attacker to capture potential plain text communication and have access to sensitive information.

Produtos afetados

Siemens AG · SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants)Siemens AG · SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants)Siemens AG · SIMATIC HMI Comfort Panels (incl. SIPLUS variants)Siemens AG · SIMATIC HMI KTP700F Mobile Arctic Siemens AG · SIMATIC HMI Mobile Panels 2nd Generation Siemens AG · SIMATIC WinCC Runtime Advanced

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://cert-portal.siemens.com/productcert/pdf/ssa-364335.pdf https://us-cert.cisa.gov/ics/advisories/icsa-20-196-04