description: The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote attacker to gain access to the device if the service is enabled. Telnet is disabled by default on the SINAMICS Medium Voltage Products (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).
problem types: MISSING AUTHENTICATION FOR CRITICAL FUNCTION CWE-306
affected:
{
product: SINAMICS Medium Voltage Products
vendor: n/a
versions:
status: affected, version: SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions
}