Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-25661
HistoryMay 12, 2021 - 2:15 p.m.

CVE-2021-25661

2021-05-1214:15:11
CWE-788
[email protected]
web.nvd.nist.gov
5
simatic
hmi
smartvnc
out-of-bounds
denial-of-service

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

52.6%

JSON

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7" & 15" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7" & 15" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4" - 22" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4" - 22" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4). SmartVNC has an out-of-bounds memory access vulnerability that could be triggered on the client side when sending data from the server, which could result in a Denial-of-Service condition.

Affected configurations

Nvd
Node
siemenssimatic_wincc_runtime_advancedRange<16
OR
siemenssimatic_wincc_runtime_advancedMatch16-
OR
siemenssimatic_wincc_runtime_advancedMatch16update1
OR
siemenssimatic_wincc_runtime_advancedMatch16update2
OR
siemenssimatic_wincc_runtime_advancedMatch16update3
Node
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmwareRange<16
OR
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmwareMatch16-
OR
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmwareMatch16update1
OR
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmwareMatch16update2
OR
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmwareMatch16update3
AND
siemenssimatic_hmi_comfort_outdoor_panels_7\"Match-
Node
siemenssimatic_hmi_comfort_outdoor_panels_15\"_firmwareRange<16
OR
siemenssimatic_hmi_comfort_outdoor_panels_15\"_firmwareMatch16
OR
siemenssimatic_hmi_comfort_outdoor_panels_15\"_firmwareMatch16-
OR
siemenssimatic_hmi_comfort_outdoor_panels_15\"_firmwareMatch16update1
OR
siemenssimatic_hmi_comfort_outdoor_panels_15\"_firmwareMatch16update2
OR
siemenssimatic_hmi_comfort_outdoor_panels_15\"_firmwareMatch16update3
AND
siemenssimatic_hmi_comfort_outdoor_panels_15\"Match-
Node
siemenssimatic_hmi_comfort_panels_4\"_firmwareRange<16
OR
siemenssimatic_hmi_comfort_panels_4\"_firmwareMatch16-
OR
siemenssimatic_hmi_comfort_panels_4\"_firmwareMatch16update1
OR
siemenssimatic_hmi_comfort_panels_4\"_firmwareMatch16update2
OR
siemenssimatic_hmi_comfort_panels_4\"_firmwareMatch16update3
AND
siemenssimatic_hmi_comfort_panels_4\"Match-
Node
siemenssimatic_hmi_comfort_panels_22\"_firmwareRange<16
OR
siemenssimatic_hmi_comfort_panels_22\"_firmwareMatch16-
OR
siemenssimatic_hmi_comfort_panels_22\"_firmwareMatch16update1
OR
siemenssimatic_hmi_comfort_panels_22\"_firmwareMatch16update2
OR
siemenssimatic_hmi_comfort_panels_22\"_firmwareMatch16update3
AND
siemenssimatic_hmi_comfort_panels_22\"Match-
Node
siemenssimatic_hmi_ktp_mobile_panels_ktp400f_firmwareRange<16
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp400f_firmwareMatch16-
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp400f_firmwareMatch16update1
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp400f_firmwareMatch16update2
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp400f_firmwareMatch16update3
AND
siemenssimatic_hmi_ktp_mobile_panels_ktp400fMatch-
Node
siemenssimatic_hmi_ktp_mobile_panels_ktp700_firmwareRange<16
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700_firmwareMatch16-
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700_firmwareMatch16update1
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700_firmwareMatch16update2
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700_firmwareMatch16update3
AND
siemenssimatic_hmi_ktp_mobile_panels_ktp700Match-
Node
siemenssimatic_hmi_ktp_mobile_panels_ktp700f_firmwareRange<16
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700f_firmwareMatch16-
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700f_firmwareMatch16update1
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700f_firmwareMatch16update2
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700f_firmwareMatch16update3
AND
siemenssimatic_hmi_ktp_mobile_panels_ktp700fMatch-
Node
siemenssimatic_hmi_ktp_mobile_panels_ktp900_firmwareRange<16
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900_firmwareMatch16-
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900_firmwareMatch16update1
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900_firmwareMatch16update2
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900_firmwareMatch16update3
AND
siemenssimatic_hmi_ktp_mobile_panels_ktp900Match-
Node
siemenssimatic_hmi_ktp_mobile_panels_ktp900f_firmwareRange<16
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900f_firmwareMatch16-
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900f_firmwareMatch16update1
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900f_firmwareMatch16update2
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900f_firmwareMatch16update3
AND
siemenssimatic_hmi_ktp_mobile_panels_ktp900fMatch-
Node
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmwareRange<15.1
OR
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmwareMatch15.1-
OR
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmwareMatch15.1update1
OR
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmwareMatch15.1update2
OR
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmwareMatch15.1update3
OR
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmwareMatch15.1update4
OR
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmwareMatch15.1update5
AND
siemenssimatic_hmi_comfort_outdoor_panels_7\"Match-
Node
siemenssimatic_hmi_comfort_outdoor_panels_15\"_firmwareRange<15.1
OR
siemenssimatic_hmi_comfort_outdoor_panels_15\"_firmwareMatch15.1-
OR
siemenssimatic_hmi_comfort_outdoor_panels_15\"_firmwareMatch15.1update1
OR
siemenssimatic_hmi_comfort_outdoor_panels_15\"_firmwareMatch15.1update2
OR
siemenssimatic_hmi_comfort_outdoor_panels_15\"_firmwareMatch15.1update3
OR
siemenssimatic_hmi_comfort_outdoor_panels_15\"_firmwareMatch15.1update4
OR
siemenssimatic_hmi_comfort_outdoor_panels_15\"_firmwareMatch15.1update5
AND
siemenssimatic_hmi_comfort_outdoor_panels_15\"Match-
Node
siemenssimatic_hmi_comfort_panels_4\"_firmwareRange<15.1
OR
siemenssimatic_hmi_comfort_panels_4\"_firmwareMatch15.1-
OR
siemenssimatic_hmi_comfort_panels_4\"_firmwareMatch15.1update1
OR
siemenssimatic_hmi_comfort_panels_4\"_firmwareMatch15.1update2
OR
siemenssimatic_hmi_comfort_panels_4\"_firmwareMatch15.1update3
OR
siemenssimatic_hmi_comfort_panels_4\"_firmwareMatch15.1update4
OR
siemenssimatic_hmi_comfort_panels_4\"_firmwareMatch15.1update5
AND
siemenssimatic_hmi_comfort_panels_4\"Match-
Node
siemenssimatic_hmi_comfort_panels_22\"_firmwareRange<15.1
OR
siemenssimatic_hmi_comfort_panels_22\"_firmwareMatch15.1-
OR
siemenssimatic_hmi_comfort_panels_22\"_firmwareMatch15.1update1
OR
siemenssimatic_hmi_comfort_panels_22\"_firmwareMatch15.1update2
OR
siemenssimatic_hmi_comfort_panels_22\"_firmwareMatch15.1update3
OR
siemenssimatic_hmi_comfort_panels_22\"_firmwareMatch15.1update4
OR
siemenssimatic_hmi_comfort_panels_22\"_firmwareMatch15.1update5
AND
siemenssimatic_hmi_comfort_panels_22\"Match-
Node
siemenssimatic_hmi_ktp_mobile_panels_ktp400f_firmwareRange<15.1
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp400f_firmwareMatch15.1-
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp400f_firmwareMatch15.1update1
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp400f_firmwareMatch15.1update2
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp400f_firmwareMatch15.1update3
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp400f_firmwareMatch15.1update4
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp400f_firmwareMatch15.1update5
AND
siemenssimatic_hmi_ktp_mobile_panels_ktp400fMatch-
Node
siemenssimatic_hmi_ktp_mobile_panels_ktp700_firmwareRange<15.1
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700_firmwareMatch15.1-
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700_firmwareMatch15.1update1
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700_firmwareMatch15.1update2
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700_firmwareMatch15.1update3
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700_firmwareMatch15.1update4
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700_firmwareMatch15.1update5
AND
siemenssimatic_hmi_ktp_mobile_panels_ktp700Match-
Node
siemenssimatic_hmi_ktp_mobile_panels_ktp700f_firmwareRange<15.1
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700f_firmwareMatch15.1-
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700f_firmwareMatch15.1update1
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700f_firmwareMatch15.1update2
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700f_firmwareMatch15.1update3
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700f_firmwareMatch15.1update4
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp700f_firmwareMatch15.1update5
AND
siemenssimatic_hmi_ktp_mobile_panels_ktp700fMatch-
Node
siemenssimatic_hmi_ktp_mobile_panels_ktp900_firmwareRange<15.1
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900_firmwareMatch15.1-
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900_firmwareMatch15.1update1
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900_firmwareMatch15.1update2
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900_firmwareMatch15.1update3
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900_firmwareMatch15.1update4
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900_firmwareMatch15.1update5
AND
siemenssimatic_hmi_ktp_mobile_panels_ktp900Match-
Node
siemenssimatic_hmi_ktp_mobile_panels_ktp900f_firmwareRange<15.1
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900f_firmwareMatch15.1-
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900f_firmwareMatch15.1update1
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900f_firmwareMatch15.1update2
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900f_firmwareMatch15.1update3
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900f_firmwareMatch15.1update4
OR
siemenssimatic_hmi_ktp_mobile_panels_ktp900f_firmwareMatch15.1update5
AND
siemenssimatic_hmi_ktp_mobile_panels_ktp900fMatch-
Node
siemenssimatic_wincc_runtime_advancedRange<15.1
OR
siemenssimatic_wincc_runtime_advancedMatch15.1-
OR
siemenssimatic_wincc_runtime_advancedMatch15.1update1
OR
siemenssimatic_wincc_runtime_advancedMatch15.1update2
OR
siemenssimatic_wincc_runtime_advancedMatch15.1update3
OR
siemenssimatic_wincc_runtime_advancedMatch15.1update4
OR
siemenssimatic_wincc_runtime_advancedMatch15.1update5
VendorProductVersionCPE
siemenssimatic_wincc_runtime_advanced*cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:*
siemenssimatic_wincc_runtime_advanced16cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:16:-:*:*:*:*:*:*
siemenssimatic_wincc_runtime_advanced16cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:16:update1:*:*:*:*:*:*
siemenssimatic_wincc_runtime_advanced16cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:16:update2:*:*:*:*:*:*
siemenssimatic_wincc_runtime_advanced16cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:16:update3:*:*:*:*:*:*
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmware*cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7\"_firmware:*:*:*:*:*:*:*:*
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmware16cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7\"_firmware:16:-:*:*:*:*:*:*
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmware16cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7\"_firmware:16:update1:*:*:*:*:*:*
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmware16cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7\"_firmware:16:update2:*:*:*:*:*:*
siemenssimatic_hmi_comfort_outdoor_panels_7\"_firmware16cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7\"_firmware:16:update3:*:*:*:*:*:*
Rows per page:
1-10 of 1201

Related

cvelist 1
prion 1
cve 1
ics 1
cvelist
cvelist
CVE-2021-25661
2021-05-12 13:18:22
prion
prion
Design/Logic Flaw
2021-05-12 14:15:00
cve
cve
CVE-2021-25661
2021-05-12 14:15:11
ics
ics
Siemens SIMATIC SmartVNC HMI WinCC Products (Update B)
2021-10-14 12:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

52.6%

JSON
Related for NVD:CVE-2021-25661
cvelist1prion1cve1ics1