CRITICAL🇵🇱 Wersja polska

CVE-2021-27384

CVSS 9.8v3.1pub. 2021-05-12upd. 2026-06-02

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). SmartVNC has an out-of-bounds memory access vulnerability in the device layout handler, represented by a binary data stream on client side, which can potentially result in code execution.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Siemens Simatic Hmi Comfort Outdoor Panels 15\"

    HW
    Siemens
    all versions

  • Siemens Simatic Hmi Comfort Outdoor Panels 15\" Firmware

    OS
    Siemens
    15.116< 16< 15.1

  • Siemens Simatic Hmi Comfort Outdoor Panels 7\"

    HW
    Siemens
    all versions

  • Siemens Simatic Hmi Comfort Outdoor Panels 7\" Firmware

    OS
    Siemens
    15.116< 16< 15.1

  • Siemens Simatic Hmi Comfort Panels 22\"

    HW
    Siemens
    all versions

  • Siemens Simatic Hmi Comfort Panels 22\" Firmware

    OS
    Siemens
    15.116< 15.1< 16

  • Siemens Simatic Hmi Comfort Panels 4\"

    HW
    Siemens
    all versions

  • Siemens Simatic Hmi Comfort Panels 4\" Firmware

    OS
    Siemens
    15.116< 16< 15.1

  • Siemens Simatic Hmi Ktp Mobile Panels Ktp400f

    HW
    Siemens
    all versions

  • Siemens Simatic Hmi Ktp Mobile Panels Ktp400f Firmware

    OS
    Siemens
    15.116< 16< 15.1

  • Siemens Simatic Hmi Ktp Mobile Panels Ktp700

    HW
    Siemens
    all versions

  • Siemens Simatic Hmi Ktp Mobile Panels Ktp700f

    HW
    Siemens
    all versions

  • Siemens Simatic Hmi Ktp Mobile Panels Ktp700f Firmware

    OS
    Siemens
    15.116< 16< 15.1

  • Siemens Simatic Hmi Ktp Mobile Panels Ktp700 Firmware

    OS
    Siemens
    15.116< 15.1< 16

  • Siemens Simatic Hmi Ktp Mobile Panels Ktp900

    HW
    Siemens
    all versions

  • Siemens Simatic Hmi Ktp Mobile Panels Ktp900f

    HW
    Siemens
    all versions

  • Siemens Simatic Hmi Ktp Mobile Panels Ktp900f Firmware

    OS
    Siemens
    15.116< 15.1< 16

  • Siemens Simatic Hmi Ktp Mobile Panels Ktp900 Firmware

    OS
    Siemens
    15.116< 16< 15.1

  • Siemens Simatic Wincc Runtime Advanced

    APP
    Siemens
    15.116< 15.1< 16

  • Siemens Sinamics Gh150

    HW
    Siemens
    all versions

  • Siemens Sinamics Gh150 Firmware

    OS
    Siemens
    all versions

  • Siemens Sinamics Gl150

    HW
    Siemens
    all versions

  • Siemens Sinamics Gl150 Firmware

    OS
    Siemens
    all versions

  • Siemens Sinamics Gm150

    HW
    Siemens
    all versions

  • Siemens Sinamics Gm150 Firmware

    OS
    Siemens
    all versions

  • Siemens Sinamics Sh150

    HW
    Siemens
    all versions

  • Siemens Sinamics Sh150 Firmware

    OS
    Siemens
    all versions

  • Siemens Sinamics Sl150

    HW
    Siemens
    all versions

  • Siemens Sinamics Sl150 Firmware

    OS
    Siemens
    all versions

  • Siemens Sinamics Sm120

    HW
    Siemens
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2021-31337CRITICAL9.8PL ✓same product

Brak uwierzytelnienia w usłudze Telnet komponentu SIMATIC HMI w produktach Siemens SINAMICS

CVE-2021-27388CRITICAL9.8PL ✓same product

Siemens SINAMICS MV: nieuwierzytelniony dostęp przez Sm@rtServer

CVE-2020-15798CRITICAL9.8PL ✓same product

Brak uwierzytelnienia w usłudze telnet paneli Siemens SIMATIC HMI

CVE-2019-6572CRITICAL9.1PL ✓same product

Siemens SIMATIC HMI — zakodowane hasło SNMP umożliwia przejęcie kontroli

CVE-2021-25660HIGH7.5same product

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variant...