CVE-2021-25660
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
Impact
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4). SmartVNC has an out-of-bounds memory access vulnerability that could be triggered on the server side when sending data from the client, which could result in a Denial-of-Service condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Simatic Hmi Comfort Outdoor Panels 7\" Firmware | before 16 before 15.1 Versions 16, 15.1 |
| Siemens | Simatic Hmi Comfort Outdoor Panels 15\" Firmware | before 16 before 15.1 Versions 16, 15.1 |
| Siemens | Simatic Hmi Comfort Panels 4\" Firmware | before 16 before 15.1 Versions 16, 15.1 |
| Siemens | Simatic Hmi Comfort Panels 22\" Firmware | before 16 before 15.1 Versions 16, 15.1 |
| Siemens | Simatic Hmi Ktp Mobile Panels Ktp400f Firmware | before 16 before 15.1 Versions 16, 15.1 |
| Siemens | Simatic Hmi Ktp Mobile Panels Ktp700 Firmware | before 16 before 15.1 Versions 16, 15.1 |
| Siemens | Simatic Hmi Ktp Mobile Panels Ktp700f Firmware | before 16 before 15.1 Versions 16, 15.1 |
| Siemens | Simatic Hmi Ktp Mobile Panels Ktp900 Firmware | before 16 before 15.1 Versions 16, 15.1 |
| Siemens | Simatic Hmi Ktp Mobile Panels Ktp900f Firmware | before 16 before 15.1 Versions 16, 15.1 |
| Siemens | Simatic Wincc Runtime Advanced | before 16 before 15.1 Versions 16, 15.1 |