A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). SmartVNC has a heap allocation leak vulnerability in the server Tight encoder, which could result in a Denial-of-Service condition.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSiemens Simatic Hmi Comfort Outdoor Panels 15\"
HWSiemensall versionsSiemens Simatic Hmi Comfort Outdoor Panels 15\" Firmware
OSSiemens15.116< 16< 15.1Siemens Simatic Hmi Comfort Outdoor Panels 7\"
HWSiemensall versionsSiemens Simatic Hmi Comfort Outdoor Panels 7\" Firmware
OSSiemens15.116< 16< 15.1Siemens Simatic Hmi Comfort Panels 22\"
HWSiemensall versionsSiemens Simatic Hmi Comfort Panels 22\" Firmware
OSSiemens15.116< 15.1< 16Siemens Simatic Hmi Comfort Panels 4\"
HWSiemensall versionsSiemens Simatic Hmi Comfort Panels 4\" Firmware
OSSiemens15.116< 16< 15.1Siemens Simatic Hmi Ktp Mobile Panels Ktp400f
HWSiemensall versionsSiemens Simatic Hmi Ktp Mobile Panels Ktp400f Firmware
OSSiemens15.116< 16< 15.1Siemens Simatic Hmi Ktp Mobile Panels Ktp700
HWSiemensall versionsSiemens Simatic Hmi Ktp Mobile Panels Ktp700f
HWSiemensall versionsSiemens Simatic Hmi Ktp Mobile Panels Ktp700f Firmware
OSSiemens15.116< 16< 15.1Siemens Simatic Hmi Ktp Mobile Panels Ktp700 Firmware
OSSiemens15.116< 15.1< 16Siemens Simatic Hmi Ktp Mobile Panels Ktp900
HWSiemensall versionsSiemens Simatic Hmi Ktp Mobile Panels Ktp900f
HWSiemensall versionsSiemens Simatic Hmi Ktp Mobile Panels Ktp900f Firmware
OSSiemens15.116< 15.1< 16Siemens Simatic Hmi Ktp Mobile Panels Ktp900 Firmware
OSSiemens15.116< 16< 15.1Siemens Simatic Wincc Runtime Advanced
APPSiemens15.116< 15.1< 16Siemens Sinamics Gh150
HWSiemensall versionsSiemens Sinamics Gh150 Firmware
OSSiemensall versionsSiemens Sinamics Gl150
HWSiemensall versionsSiemens Sinamics Gl150 Firmware
OSSiemensall versionsSiemens Sinamics Gm150
HWSiemensall versionsSiemens Sinamics Gm150 Firmware
OSSiemensall versionsSiemens Sinamics Sh150
HWSiemensall versionsSiemens Sinamics Sh150 Firmware
OSSiemensall versionsSiemens Sinamics Sl150
HWSiemensall versionsSiemens Sinamics Sl150 Firmware
OSSiemensall versionsSiemens Sinamics Sm120
HWSiemensall versions
Related vulnerabilities
Brak uwierzytelnienia w usłudze Telnet komponentu SIMATIC HMI w produktach Siemens SINAMICS
Siemens SINAMICS MV: nieuwierzytelniony dostęp przez Sm@rtServer
Siemens SmartVNC — podatność out-of-bounds w obsłudze układu urządzenia (RCE)
Brak uwierzytelnienia w usłudze telnet paneli Siemens SIMATIC HMI
Siemens SIMATIC HMI — zakodowane hasło SNMP umożliwia przejęcie kontroli