ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
The Recordpublished ()ingested

Telnet service left enabled and without a password on SIMATIC HMI Comfort Panels

mediumVulnerabilityimportance 35CVE-2021-31337
Read the original
Tagscve-2021-31337vulnerability

Vulnerabilities mentionedAll →

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2021-31337
The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote attacker to

The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote attacker to gain access to the device if the service is enabled. Telnet is disabled by default on the SINAMICS Medium Voltage Products (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).

NVD description · AI analysis pending		9.82%
  • siemens sinamics sl150 firmware
  • siemens sinamics sm150 firmware
  • siemens sinamics sm150i firmware
—
Full article245 words · extracted from therecord.media · click to collapse

Siemens SIMATIC HMI Comfort Panels, devices meant to provide visualization of data received from industrial equipment, are exposing their Telnet service without any form of authentication, security researchers have discovered.

The bug has industrial security experts worried as they fear this misconfiguration could lead to scenarios where threat actors could remotely access the SIMATIC panels and tamper with the data they display.

  • Tracked as CVE-2021-31337, the vulnerability was revealed earlier this week.
  • All SIMATIC HMI Comfort Panels models are believed to be impacted, except panels for SINAMICS Medium Voltage Products (SL150, SM150, and SM150i), where the Telnet service is disabled by default.
  • SIMATIC HMI Comfort Panels work by taking data from industrial equipment and displaying it on a tablet while providing an easy way to control the device by a human operator. They can interact with a wide spectrum of industrial equipment, from industrial robots to electrical equipment.
  • The panels can't be connected online, per their brochure, but devices installed inside local networks could be exploited if an attacker has managed to obtain a foothold inside internal networks via other means.
  • Siemens has published firmware updates for affected models, per MITRE and CISA.
— Ralph Langner (@langnergroup) June 28, 2021

No previous article

No new articles

Catalin Cimpanu

is a cybersecurity reporter who previously worked at ZDNet and Bleeping Computer, where he became a well-known name in the industry for his constant scoops on new vulnerabilities, cyberattacks, and law enforcement actions against hackers.

Text extracted automatically; images, tables and formatting may be missing. Original: https://therecord.media/telnet-service-left-enabled-and-without-a-password-on-simatic-hmi-comfort-panels