PT-2021-17429 · Siemens · Sinamics Sl150+8

Published 2021-05-12 · Updated 2022-10-25 · CVE-2021-27385

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Comfort Outdoor Panels V15 7" & 15" (incl. SIPLUS variants) versions prior to V15.1 Update 6 SIMATIC HMI Comfort Outdoor Panels V16 7" & 15" (incl. SIPLUS variants) versions prior to V16 Update 4 SIMATIC HMI Comfort Panels V15 4" - 22" (incl. SIPLUS variants) versions prior to V15.1 Update 6 SIMATIC HMI Comfort Panels V16 4" - 22" (incl. SIPLUS variants) versions prior to V16 Update 4 SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F versions prior to V15.1 Update 6 SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F versions prior to V16 Update 4 SIMATIC WinCC Runtime Advanced V15 versions prior to V15.1 Update 6 SIMATIC WinCC Runtime Advanced V16 versions prior to V16 Update 4 SINAMICS GH150 versions prior to not specified SINAMICS GL150 (with option X30) versions prior to not specified SINAMICS GM150 (with option X30) versions prior to not specified SINAMICS SH150 versions prior to not specified SINAMICS SL150 versions prior to not specified SINAMICS SM120 versions prior to not specified SINAMICS SM150 versions prior to not specified SINAMICS SM150i versions prior to not specified

Description A remote attacker could send specially crafted packets to the SmartVNC device layout handler on the client side, which could influence the amount of resources consumed and result in a Denial-of-Service (infinite loop) condition.

Recommendations For SIMATIC HMI Comfort Outdoor Panels V15 7" & 15" (incl. SIPLUS variants), update to version V15.1 Update 6 or later. For SIMATIC HMI Comfort Outdoor Panels V16 7" & 15" (incl. SIPLUS variants), update to version V16 Update 4 or later. For SIMATIC HMI Comfort Panels V15 4" - 22" (incl. SIPLUS variants), update to version V15.1 Update 6 or later. For SIMATIC HMI Comfort Panels V16 4" - 22" (incl. SIPLUS variants), update to version V16 Update 4 or later. For SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F, update to version V15.1 Update 6 or later. For SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F, update to version V16 Update 4 or later. For SIMATIC WinCC Runtime Advanced V15, update to version V15.1 Update 6 or later. For SIMATIC WinCC Runtime Advanced V16, update to version V16 Update 4 or later. For SINAMICS products, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Infinite Loop

Resource Exhaustion

Weakness Enumeration

CWE-835

CWE-400

Related Identifiers

CVE-2021-27385

Affected Products

Simatic Hmi Comfort Outdoor Panels

Simatic Hmi Comfort Panels

Simatic Hmi Ktp Mobile Panels

Simatic Wincc Runtime Advanced

Sinamics Gh150

Sinamics Sl150

Sinamics Sm150

Sinamics Sm120

Sinamics Sm150I

References · 7

• https://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdf · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-27385 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27385 · Security Note
• https://t.me/cvenotify/14800 · Telegram Post
• https://t.me/cvenotify/14361 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsa-21-131-12 · Note