CVE-2019-6576

CVE-2019-6576 affects Siemens SIMATIC HMI Comfort Panels (4"–22"), Comfort Outdoor Panels (7"/15"), KTP Mobile Panels (KTP400F, KTP700, KTP700F, KTP900, KTP900F), WinCC Runtime Advanced/Professional, WinCC (TIA Portal) and HMI Classic Devices (all versions prior to V15.1 Update 1). Root cause: in...

CVE-2019-6577

CVE-2019-6577 is an XSS vulnerability in Siemens SIMATIC HMI/WinCC products (Comfort Panels, Outdoor Panels, KTP Mobile Panels, WinCC Runtime/Pro, WinCC in TIAPortal, and HMI Classic devices) exploitable via the integrated web server when an attacker can modify device configuration through SNMP. ...

CVE-2018-13812

Siemens SIMATIC HMI/WinCC devices are affected by CVE-2018-13812: a directory traversal flaw in the integrated web server that allows an attacker with network access (no authentication, no user interaction) to download arbitrary files from affected panels and runtimes (4"–22" Comfort Panels, Comf...

CVE-2018-13813

Siemens CVE-2018-13813 affects SIMATIC HMI Comfort Panels (4"–22"), Comfort Outdoor Panels (7" & 15"), KTP Mobile Panels (KTP400F, KTP700/700F, KTP900/900F), WinCC Runtime Advanced/Professional, WinCC (TIA Portal), and HMI Classic Devices (all versions) prior to V15 Update 4. The vulnerability is...

CVE-2019-6572

CVE-2019-6572 affects Siemens SIMATIC HMI Comfort Panels (4"–22"), Comfort Outdoor Panels (7"/15"), KTP Mobile Panels, WinCC Runtime Advanced/Professional, WinCC (TIA Portal) and HMI Classic Devices all versions before V15.1 Update 1. The root cause is use of a hardcoded SNMP community string ena...

CVE-2018-13814

CVE-2018-13814 affects Siemens SIMATIC panels and WinCC components prior to version 14, including HMI Comfort Panels (4"–22"), Comfort Outdoor Panels (7"/15"), KTP Mobile Panels (KTP400F/700/700F/900/900F), WinCC Runtime Advanced/Professional, WinCC (TIA Portal), and HMI Classic Devices. The vuln...