Critical severity9.8NVD Advisory· Published Jun 28, 2021· Updated Jun 17, 2026
CVE-2021-31337
CVE-2021-31337
Description
The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote attacker to gain access to the device if the service is enabled. Telnet is disabled by default on the SINAMICS Medium Voltage Products (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:o:siemens:sinamics_sl150_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:siemens:sinamics_sl150_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:sinamics_sm150_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:sinamics_sm150i_firmware:*:*:*:*:*:*:*:*
- SIMATIC/SIMATIC HMI Comfort Panelsdescription
- Range: All versions
- Range: All versions
Patches
Vulnerability mechanics
References
1- us-cert.cisa.gov/ics/advisories/icsa-21-131-04nvdNot ApplicableThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.