CVE-2021-27385

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7" & 15" incl. SIPLUS variants All versions V15.1 Update 6, SIMATIC HMI Comfort Outdoor Panels V16 7" & 15" incl. SIPLUS variants All versions V16 Update 4, SIMATIC HMI Comfort Panels V15 4" - 22" incl. SIPLUS...

CVE-2021-27386

CVE-2021-27386 maps to a SmartVNC heap allocation leak vulnerability in the client-side device layout handler, leading to a potential Denial-of-Service . Affected products include Siemens/SmartVNC-enabled setups connected to SIMATIC HMI Comfort Outdoor Panels, HMI Comfort Panels, KTP Mobile Panel...

CVE-2021-25662

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7" & 15" incl. SIPLUS variants All versions V15.1 Update 6, SIMATIC HMI Comfort Outdoor Panels V16 7" & 15" incl. SIPLUS variants All versions V16 Update 4, SIMATIC HMI Comfort Panels V15 4" - 22" incl. SIPLUS...

CVE-2021-25661

CVE-2021-25661 is an out-of-bounds memory access vulnerability in SmartVNC that can be triggered on the client side when data is sent from the server, potentially causing a Denial-of-Service. Affected products include SIMATIC WinCC Runtime Advanced and related HMI/SU panels (Outdoor Panels v15/v1...

CVE-2021-25660

The CVE-2021-25660 entry maps to Siemens SmartVNC/WinCC/HMI components with an out-of-bounds memory access vulnerability that can trigger a Denial-of-Service on the server side (and related variants on the client side). Affected products include SIMATIC HMI Comfort Outdoor Panels (various V15/V16...

CVE-2021-25661

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7" & 15" incl. SIPLUS variants All versions V15.1 Update 6, SIMATIC HMI Comfort Outdoor Panels V16 7" & 15" incl. SIPLUS variants All versions V16 Update 4, SIMATIC HMI Comfort Panels V15 4" - 22" incl. SIPLUS...

CVE-2021-25662

The CVE-2021-25662 entry concerns SmartVNC’s handling of exceptions when the program execution process is modified after a packet is sent from the server, which could trigger a Denial-of-Service condition. Affected products include Siemens SIMATIC HMI Comfort Outdoor Panels (V15/V16 series), SIMA...

CVE-2021-27384

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7" & 15" incl. SIPLUS variants All versions V15.1 Update 6, SIMATIC HMI Comfort Outdoor Panels V16 7" & 15" incl. SIPLUS variants All versions V16 Update 4, SIMATIC HMI Comfort Panels V15 4" - 22" incl. SIPLUS...

CVE-2019-19276

CVE-2019-19276 affects Siemens SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS) and SIMATIC HMI KTP Mobile Panels, all versions prior to version 16 update 4. The root cause is an out-of-bounds write (CWE-787) triggered by specially crafted UDP packets to port 161, causing the SNMP service...

The vulnerability of Mitsubishi Electric’s graphic control panel software for the GOT2000 and GOT SIMPLE series lies in authentication errors, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Mitsubishi Electric’s GOT2000 and GOT SIMPLE graphic control panels relates to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability in the web administration panel of Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 microprogrammed network devices allows a hacker to perform cross-site scripting attacks.

The vulnerability of the web administration panel of Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 networking devices is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

CVE-2020-15798

A vulnerability has been identified in SIMATIC HMI Comfort Panels incl. SIPLUS variants All versions V16 Update 3a, SIMATIC HMI KTP Mobile Panels All versions V16 Update 3a, SINAMICS GH150 All versions, SINAMICS GL150 with option X30 All versions, SINAMICS GM150 with option X30 All versions,...

CVE-2020-15798

A vulnerability has been identified in SIMATIC HMI Comfort Panels incl. SIPLUS variants All versions V16 Update 3a, SIMATIC HMI KTP Mobile Panels All versions V16 Update 3a, SINAMICS GH150 All versions, SINAMICS GL150 with option X30 All versions, SINAMICS GM150 with option X30 All versions,...

CVE-2020-15798

A vulnerability has been identified in SIMATIC HMI Comfort Panels incl. SIPLUS variants All versions V16 Update 3a, SIMATIC HMI KTP Mobile Panels All versions V16 Update 3a, SINAMICS GH150 All versions, SINAMICS GL150 with option X30 All versions, SINAMICS GM150 with option X30 All versions,...

CVE-2020-15798

CVE-2020-15798 affects Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS) and SIMATIC HMI KTP Mobile Panels, plus several SINAMICS models (GH150, GL150 X30, GM150 X30, SH150, SL150, SM120, SM150, SM150i). The vulnerability arises from the Telnet service not requiring authentication, allowing a rem...

Bosch FSM-2500 和 Bosch FSM-5000 访问控制错误漏洞

Bosch FSM-2500 and Bosch FSM-5000 are both panel-ready fire control systems from Bosch of Germany. Bosch FSM-2500 and Bosch FSM-5000 are vulnerable to a password disclosure vulnerability that could be exploited by a remote attacker to submit a special request that could gain access to sensitive...

Bosch FSM-2500 server 和 Bosch FSM-5000 server 信任管理问题漏洞

Bosch FSM-2500 and Bosch FSM-5000 are both panel-ready fire control systems from Bosch of Germany. Bosch FSM-2500 and Bosch FSM-5000 suffer from a hard-coded vulnerability that could be exploited by remote attackers to submit special requests to gain unauthorized access to the database system wit...

TPEditor Out-of-Bounds Write Vulnerability

TPEditor is programming software for Delta Text Panels running on Windows. An out-of-bounds write vulnerability exists in TPEditor 1.98 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted project files...

The vulnerability of the CmtViewer application, which involves session management errors, allows a hacker to gain unauthorized access.

The vulnerability of the CmtViewer application for controlling programmable panels is related to session management errors. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access by intercepting the session...

The vulnerability of the CmtViewer application, which manages programmable panels, stems from the storage of protected information in an unencrypted form. This allows a perpetrator to gain access to the protected information.

The vulnerability of the CmtViewer application for controlling programmable panels lies in the storage of protected information in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to gain access to the protected information remotely...