PT-2021-16735 · Siemens · Simatic Hmi Ktp Mobile Panels+3
Published
2021-05-12
·
Updated
2021-12-16
·
CVE-2021-25660
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
SIMATIC HMI Comfort Outdoor Panels V15 versions 7" & 15" (incl. SIPLUS variants) prior to V15.1 Update 6
SIMATIC HMI Comfort Outdoor Panels V16 versions 7" & 15" (incl. SIPLUS variants) prior to V16 Update 4
SIMATIC HMI Comfort Panels V15 versions 4" - 22" (incl. SIPLUS variants) prior to V15.1 Update 6
SIMATIC HMI Comfort Panels V16 versions 4" - 22" (incl. SIPLUS variants) prior to V16 Update 4
SIMATIC HMI KTP Mobile Panels V15 versions KTP400F, KTP700, KTP700F, KTP900 and KTP900F prior to V15.1 Update 6
SIMATIC HMI KTP Mobile Panels V16 versions KTP400F, KTP700, KTP700F, KTP900 and KTP900F prior to V16 Update 4
SIMATIC WinCC Runtime Advanced V15 prior to V15.1 Update 6
SIMATIC WinCC Runtime Advanced V16 prior to V16 Update 4
Description
A vulnerability has been identified in SmartVNC, which could result in a Denial-of-Service condition due to an out-of-bounds memory access. This issue can be triggered on the server side when sending data from the client.
Recommendations
For SIMATIC HMI Comfort Outdoor Panels V15, update to V15.1 Update 6 or later.
For SIMATIC HMI Comfort Outdoor Panels V16, update to V16 Update 4 or later.
For SIMATIC HMI Comfort Panels V15, update to V15.1 Update 6 or later.
For SIMATIC HMI Comfort Panels V16, update to V16 Update 4 or later.
For SIMATIC HMI KTP Mobile Panels V15, update to V15.1 Update 6 or later.
For SIMATIC HMI KTP Mobile Panels V16, update to V16 Update 4 or later.
For SIMATIC WinCC Runtime Advanced V15, update to V15.1 Update 6 or later.
For SIMATIC WinCC Runtime Advanced V16, update to V16 Update 4 or later.
Fix
Buffer Overflow
Access of Memory Location After End of Buffer
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Simatic Hmi Comfort Outdoor Panels
Simatic Hmi Comfort Panels
Simatic Hmi Ktp Mobile Panels
Simatic Wincc Runtime Advanced