CVE-2021-27383: Allocation of Resources Without Limits or Throttling

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7" & 15" incl. SIPLUS variants All versions V15.1 Update 6, SIMATIC HMI Comfort Outdoor Panels V16 7" & 15" incl. SIPLUS variants All versions V16 Update 4, SIMATIC HMI Comfort Panels V15 4" - 22" incl. SIPLUS...

CVE-2021-27386: Missing Release of Memory after Effective Lifetime

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7" & 15" incl. SIPLUS variants All versions V15.1 Update 6, SIMATIC HMI Comfort Outdoor Panels V16 7" & 15" incl. SIPLUS variants All versions V16 Update 4, SIMATIC HMI Comfort Panels V15 4" - 22" incl. SIPLUS...

CVE-2021-25660: Access of Memory Location After End of Buffer

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7" & 15" incl. SIPLUS variants All versions V15.1 Update 6, SIMATIC HMI Comfort Outdoor Panels V16 7" & 15" incl. SIPLUS variants All versions V16 Update 4, SIMATIC HMI Comfort Panels V15 4" - 22" incl. SIPLUS...

PT-2021-17428

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Comfort Outdoor Panels V15 7" & 15" incl. SIPLUS variants versions prior to V15.1 Update 6 SIMATIC HMI Comfort Outdoor Panels V16 7" & 15" incl. SIPLUS variants versions prior to V16 Update 4 SIMATIC HMI Comfort Panels V15 4" - 22"...

CVE-2020-25242: Uncontrolled Resource Consumption

A vulnerability has been identified in SIMATIC NET CP 343-1 Advanced incl. SIPLUS variants All versions, SIMATIC NET CP 343-1 Lean incl. SIPLUS variants All versions, SIMATIC NET CP 343-1 Standard incl. SIPLUS variants All versions. Specially crafted packets sent to TCP port 102 could cause a...

CVE-2021-25661: Access of Memory Location After End of Buffer

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7" & 15" incl. SIPLUS variants All versions V15.1 Update 6, SIMATIC HMI Comfort Outdoor Panels V16 7" & 15" incl. SIPLUS variants All versions V16 Update 4, SIMATIC HMI Comfort Panels V15 4" - 22" incl. SIPLUS...

PT-2021-16737

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Comfort Outdoor Panels V15 versions 7" & 15" incl. SIPLUS variants through V15.1 Update 5 SIMATIC HMI Comfort Outdoor Panels V16 versions 7" & 15" incl. SIPLUS variants through V16 Update 3 SIMATIC HMI Comfort Panels V15 versions 4...

PT-2021-16735

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Comfort Outdoor Panels V15 versions 7" & 15" incl. SIPLUS variants prior to V15.1 Update 6 SIMATIC HMI Comfort Outdoor Panels V16 versions 7" & 15" incl. SIPLUS variants prior to V16 Update 4 SIMATIC HMI Comfort Panels V15 versions...

PT-2021-16736

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Comfort Outdoor Panels V15 versions 7" & 15" incl. SIPLUS variants prior to V15.1 Update 6 SIMATIC HMI Comfort Outdoor Panels V16 versions 7" & 15" incl. SIPLUS variants prior to V16 Update 4 SIMATIC HMI Comfort Panels V15 versions...

PT-2021-7540

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Comfort Outdoor Panels versions prior to V15.1 Update 6 SIMATIC HMI Comfort Outdoor Panels versions prior to V16 Update 4 SIMATIC HMI Comfort Panels versions prior to V15.1 Update 6 SIMATIC HMI Comfort Panels versions prior to V16...

多款 Siemens 设备资源管理错误漏洞

Siemens SIMATIC is a Siemens Siemens configuration software. A resource management error vulnerability exists in multiple Siemens devices. An attacker could send specially crafted packets that would result in a denial of service condition on TCP port 102. The following products and versions are...

Siemens SIMATIC S7-1500

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: SIMATIC S7-1500 CPU 1518F-4 Vulnerabilities: Improper Initialization, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of these Intel...

Siemens SIMATIC NET CP343-1

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC CP343-1 devices Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service condition...

Siemens SIMATIC UltraVNC HMI WinCC Products

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC HMIs/WinCC Products Vulnerabilities: Improper Initialization, Out-of-bounds Read, Heap-based Buffer Overflow, Stack-based Buffer Overflow, Access of Memory Location After End...

PT-2021-7833

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Comfort Outdoor Panels versions prior to V15.1 Update 6 SIMATIC HMI Comfort Outdoor Panels versions prior to V16 Update 4 SIMATIC HMI Comfort Panels versions prior to V15.1 Update 6 SIMATIC HMI Comfort Panels versions prior to V16...

Siemens SIMATIC WinCC 安全漏洞

Siemens SIMATIC WinCC is an automated data acquisition and monitoring SCADA system from Siemens, Germany. A security vulnerability exists in SIMATIC WinCC. The vulnerability stems from an out-of-scope memory access vulnerability in the program, which could lead to code execution...

Siemens SIMATIC SCALANCE Device Detection Consolidation

Consolidation of Siemens SIMATIC SCALANCE device detections. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if...

Siemens SIMATIC Communication Processor Vulnerability (Update C)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC Communication Processor Vulnerability: Authentication Bypass Issues 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-15-335-03...

CVE-2021-25675

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 All versions. An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a divide by zero operation could occur and cause...

CVE-2021-25675

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 All versions. An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a divide by zero operation could occur and cause...