CVE-2020-15798

9.8 CRITICAL

A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl

Published: 2021-02-09 · Last updated: 2026-06-02

Severity and scoring

CVSS: 9.8 CRITICAL
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-306

Affected products

Vendor	Product
siemens	simatic_hmi_comfort_panels_firmware, simatic_hmi_ktp_mobile_panels_firmware, sinamics_gh150_firmware

Description

A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 Update 3a), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 3a), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). Affected devices with enabled telnet service do not require authentication for this service. This could allow a remote attacker to gain full access to the device. (ZDI-CAN-12046)

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2020-15798
[Vendor advisory]https://cert-portal.siemens.com/productcert/pdf/ssa-520004.pdf
[Patch]https://cert-portal.siemens.com/productcert/pdf/ssa-752103.pdf
[Other]https://us-cert.cisa.gov/ics/advisories/icsa-21-033-02
[Vendor advisory]https://cert-portal.siemens.com/productcert/pdf/ssa-520004.pdf
[Patch]https://cert-portal.siemens.com/productcert/pdf/ssa-752103.pdf
[Other]https://us-cert.cisa.gov/ics/advisories/icsa-21-033-02

Related CVEs

Same vendor

CVE-2026-46749 — A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6) (7.5 HIGH)
CVE-2026-46748 — A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6) (8.8 HIGH)
CVE-2026-46747 — A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6) (4.3 MEDIUM)
CVE-2026-46746 — A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6) (8.8 HIGH)
CVE-2026-0257 — Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker ... (9.1 CRITICAL)

Same CWE

CVE-2026-12183 — Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerabili... (9.8 CRITICAL)
CVE-2026-53868 — Capgo before 12.128.2 contains a denial of service vulnerability allowing attackers to register accounts using arbitrary email addresses ... (7.5 HIGH)
CVE-2026-50287 — AgenticMail gives AI agents real email addresses and phone numbers
CVE-2026-53981 — Cap-go prior to 12.128.2 contains an account takeover vulnerability in its email change mechanism that allows an attacker with temporary ... (7.6 HIGH)
CVE-2026-50085 — The Aqara Board service (op-test.aqara.com) accepts arbitrary MQTT command payloads, and forwards them to the platfom's HiveMQ broker wit... (8.6 HIGH)