CVE-2021-25660
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4). SmartVNC has an out-of-bounds memory access vulnerability that could be triggered on the server side when sending data from the client, which could result in a Denial-of-Service condition.
Affected (121)
Products: Siemens: Simatic Hmi Comfort Outdoor Panels 7" Firmware, Simatic Hmi Comfort Outdoor Panels 15" Firmware, Simatic Hmi Comfort Panels 4" Firmware, Simatic Hmi Comfort Panels 22" Firmware, Simatic Hmi Ktp Mobile Panels Ktp400f Firmware, Simatic Hmi Ktp Mobile Panels Ktp700 Firmware, Simatic Hmi Ktp Mobile Panels Ktp700f Firmware, Simatic Hmi Ktp Mobile Panels Ktp900 Firmware, Simatic Hmi Ktp Mobile Panels Ktp900f Firmware, Simatic Wincc Runtime Advanced
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 16 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 16 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 16 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 16 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 16 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 16 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 16 |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 16 |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 16 |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 16 |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Comfort Outdoor Panels 7" | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Comfort Outdoor Panels 15" | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Comfort Panels 4" | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Comfort Panels 22" | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Ktp Mobile Panels Ktp400f | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Ktp Mobile Panels Ktp700 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Ktp Mobile Panels Ktp700f | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Ktp Mobile Panels Ktp900 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Ktp Mobile Panels Ktp900f | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
Related CWEs
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-788
Access of Memory Location After End of Buffer
The product reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.
References (2)
Source: productcert@siemens.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Timeline
No history available yet.