CVE:CVE-2020-15798
CNNVD:CNNVD-202101-2499
Siemens Simatic Hmi是德国西门子（Siemens）公司的一个为工业自动化设备提供人机交互功能的设备。
Siemens Simatic Hmi 存在访问控制错误漏洞，攻击者可利用该漏洞通过未经身份验证的Telnet漏洞使用，以运行代码。
solution:Upgrade siemens simatic_hmi_comfort_panels_firmware to a higher version than 16.0,16.0,16.0:update1,16.0:update2,16.0:update3,and avoid the version (,16.0),16.0,16.0:update1,16.0:update2,16.0:update3; Upgrade siemens simatic_hmi_ktp_mobile_panels_firmware to a higher version than 16.0,16.0,16.0:update1,16.0:update2,16.0:update3,and avoid the version (,16.0),16.0,16.0:update1,16.0:update2,16.0:update3; Upgrade siemens sinamics_gh150_firmware to a higher version than -; Upgrade siemens sinamics_gl150_firmware to a higher version than -; Upgrade siemens sinamics_gm150_firmware to a higher version than -; Upgrade siemens sinamics_sh150_firmware to a higher version than -; Upgrade siemens sinamics_sl150_firmware to a higher version than -; Upgrade siemens sinamics_sm150_firmware to a higher version than -; Upgrade siemens sinamics_sm120_firmware to a higher version than -; Upgrade siemens sinamics_sm150i_firmware to a higher version than -