CVEs-PoC/2021/CVE-2021-31337.md

CVE-2021-31337

Description

The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote attacker to gain access to the device if the service is enabled. Telnet is disabled by default on the SINAMICS Medium Voltage Products (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).

POC

Reference

No PoCs from references.

Github

• https://github.com/alex-hamlin/trivyal_pursuit