CVE:CVE-2020-7592
CNNVD:CNNVD-202007-578
Siemens SIMATIC HMI Comfort Panels是德国西门子（Siemens）公司的一款触摸面板设备。
多款Siemens产品中存在安全漏洞，该漏洞源于配置软件和相应设备之间的通信并未被加密。攻击者可利用该漏洞获取敏感信息。以下产品及版本受到影响：Siemens SIMATIC HMI Basic Panels 1st Generation (包括SIPLUS variants) (全部版本)；SIMATIC HMI Basic Panels 2nd Generation (包括SIPLUS variants) (全部版本)；SIMATIC HMI Comfort Panels (包括SIPLUS variants) (全部版本)；SIMATIC HMI KTP700F Mobile Arctic (全部版本)；SIMATIC HMI Mobile Panels 2nd Generation (全部版本)；SIMATIC WinCC Runtime Advanced (全部版本)。
solution:Upgrade siemens simatic_hmi_basic_panels_1st_generation to a higher version than *; Upgrade siemens simatic_hmi_basic_panels_2nd_generation to a higher version than *; Upgrade siemens simatic_wincc_runtime_advanced to a higher version than *; Upgrade siemens simatic_hmi_comfort_panels_firmware to a higher version than *; Upgrade siemens simatic_hmi_ktp700f_mobile_arctic_firmware to a higher version than *; Upgrade siemens simatic_hmi_mobile_panels_2nd_generation_firmware to a higher version than *