Skip to content
OpenAdvisories
Critical ICSA-21-131-12 7 CVEs

Siemens SIMATIC SmartVNC HMI WinCC Products (Update B)

Published May 11, 2021 · Updated May 6, 2025 · Revision 4

Vendor: Siemens Product: SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) Product: SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) Product: SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) Product: SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) Product: SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F Product: SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F Product: SIMATIC WinCC Runtime Advanced V15 Product: SIMATIC WinCC Runtime Advanced V16

Summary

Multiple SmartVNC vulnerabilities in the affected products listed below could allow remote code execution and Denial-of-Service attacks under certain conditions.

Siemens has released updates for the affected products and recommends to update to the latest version.

Vulnerabilities 7

Revision history

  1. #4

    Revision - Fixing typos

  2. #3

    V15 sub-version numbering correction

  3. #2

    Added additional solution for all products

  4. #1

    Publication Date

References