Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hwxw-fmr7-f2c3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote attacker to gain access to the device if the service is enabled. Telnet is disabled by default on the SINAMICS Medium Voltage Products (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).

The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote attacker to gain access to the device if the service is enabled. Telnet is disabled by default on the SINAMICS Medium Voltage Products (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).

EPSS

Процентиль: 70%
0.00622
Низкий

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 9.8
nvd
больше 4 лет назад

The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote attacker to gain access to the device if the service is enabled. Telnet is disabled by default on the SINAMICS Medium Voltage Products (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).

EPSS

Процентиль: 70%
0.00622
Низкий

Дефекты

CWE-306