Search/CVE-2020-7592
● CVE — Medium

CVE-2020-7592

VendorsiemensProductsimatic hmi comfort panels firmware, simatic wincc runtime advanced, simatic hmi basic panels 1st generation, simatic hmi basic panels 2nd generation, simatic hmi ktp700f mobile arctic firmware, simatic hmi mobile panels 2nd generation firmwareDiscoveredJul 14, 2020UpdatedNov 21, 2024

A vulnerability has been identified in SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants) (All versions), SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC HMI KTP700F Mobile Arctic (All versions), SIMATIC HMI Mobile Panels 2nd Generation (All versions), SIMATIC WinCC Runtime Advanced (All versions). Unencrypted communication between the configuration software and the respective device could allow an attacker to capture potential plain text communication and have access to sensitive information.

CVSS v3.1
6.5 MEDIUM
EPSS
0.33%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorADJACENT
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityNONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Connections
7 relationships
Timeline
disclosure → media coverage
Jul 14, 2020
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024