CVE-2020-15787

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Unified Comfort Panels versions prior to V16

Description A security issue has been identified where affected devices do not properly validate authentication attempts. Specifically, the validation process can be tricked by truncating the input to match only a certain number of characters, rather than the entire string. This could enable a remote attacker to guess user passwords through a brute-force attack, potentially gaining access to the Sm@rt Server.

Recommendations For versions prior to V16, update to a version that includes the necessary security fixes to properly validate authentication attempts.