CVE-2020-7592
Estado: ModificadaMedia (6.5)—
A vulnerability has been identified in SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants) (All versions), SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC HMI KTP700F Mobile Arctic (All versions), SIMATIC HMI Mobile Panels 2nd Generation (All versions), SIMATIC WinCC Runtime Advanced (All versions). Unencrypted communication between the configuration software and the respective device could allow an attacker to capture potential plain text communication and have access to sensitive information.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.33%
- Percentil entre todas las CVEs puntuadas: 24
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (6)
CWE
- CWE-319
- CWE-319
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2020-7592",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 3.3,
"accessVector": "ADJACENT_NETWORK",
"vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.5,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "productcert@siemens.com",
"affectedData": [
{
"vendor": "Siemens AG",
"product": "SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"vendor": "Siemens AG",
"product": "SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"vendor": "Siemens AG",
"product": "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"vendor": "Siemens AG",
"product": "SIMATIC HMI KTP700F Mobile Arctic",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"vendor": "Siemens AG",
"product": "SIMATIC HMI Mobile Panels 2nd Generation",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"vendor": "Siemens AG",
"product": "SIMATIC WinCC Runtime Advanced",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
]
}
],
"published": "2020-07-14T14:15:19.073",
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-364335.pdf",
"tags": [
"Vendor Advisory"
],
"source": "productcert@siemens.com"
},
{
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-196-04",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "productcert@siemens.com"
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-364335.pdf",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-196-04",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "productcert@siemens.com",
"description": [
{
"lang": "en",
"value": "CWE-319"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-319"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants) (All versions), SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC HMI KTP700F Mobile Arctic (All versions), SIMATIC HMI Mobile Panels 2nd Generation (All versions), SIMATIC WinCC Runtime Advanced (All versions). Unencrypted communication between the configuration software and the respective device could allow an attacker to capture potential plain text communication and have access to sensitive information."
},
{
"lang": "es",
"value": "Se ha identificado una vulnerabilidad en SIMATIC HMI Basic Panels 1st Generation (incluyendo las variantes SIPLUS) (Todas las versiones), SIMATIC HMI Basic Panels 2nd Generation (incluyendo las variantes SIPLUS) (Todas las versiones), SIMATIC HMI Comfort Panels (incluyendo las variantes SIPLUS) (Todas las versiones), SIMATIC HMI KTP700F Mobile Arctic (Todas las versiones), SIMATIC HMI Mobile Panels 2nd Generation (Todas las versiones), SIMATIC WinCC Runtime Advanced (Todas las versiones). Una comunicación no cifrada entre el software de configuración y el dispositivo respectivo podría permitir a un atacante capturar la comunicación potencial de texto plano y tener acceso a información confidencial"
}
],
"lastModified": "2026-06-17T03:25:04.890",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:siemens:simatic_hmi_basic_panels_1st_generation:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF9AA1D8-BDF6-40EC-8D04-49C5EAB39431"
},
{
"criteria": "cpe:2.3:a:siemens:simatic_hmi_basic_panels_2nd_generation:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E561873-49B4-4D85-8D40-9D33CEE7E7CE"
},
{
"criteria": "cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79EE15DC-74D3-4551-AAD0-EA0CB600DA76"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C98A381-02D5-460E-8849-63F4576BC52C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_hmi_comfort_panels:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3BCFE761-35C9-43EF-85BC-E8083B9F75CB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_hmi_ktp700f_mobile_arctic_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAC6E895-5577-4047-B7CC-95398563984D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_hmi_ktp700f_mobile_arctic:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4631C615-B2A4-40C3-9D1A-A1AD3C64EC51"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_hmi_mobile_panels_2nd_generation_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08693615-7A47-4062-A73D-7CDE359826F5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_hmi_mobile_panels_2nd_generation:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "59D5490F-EACA-467F-89ED-988A45393EAC"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "productcert@siemens.com"
}