Critical SSA-286838 14 CVEs

SSA-286838: Multiple Vulnerabilities in SINAMICS Medium Voltage Products

Published May 11, 2021 · Updated Aug 10, 2021 · Revision 2

Vendor: Siemens Product: SINAMICS GH150 Product: SINAMICS GL150 (with option X30) Product: SINAMICS GM150 (with option X30) Product: SINAMICS SH150 Product: SINAMICS SL150 Product: SINAMICS SM120 Product: SINAMICS SM150 Product: SINAMICS SM150i

Summary

SINAMICS medium voltage products, with Sm@rtServer enabled on SIMATIC comfort HMI Panels, are affected by multiple vulnerabilities that could allow an attacker, under certain conditions, to gain full remote access to the HMI. Note that by default Sm@rtServer is disabled, but it can be enabled by the system integrator on request.

Siemens has released updates for the affected products, and recommends to update them to the latest version.

Vulnerabilities 14

Critical 9.8

CVE-2021-27384

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…

Siemens SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F ICS / OT

May 12, 2021
High 7.5

CVE-2021-27383

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…

Siemens SIMATIC WinCC Runtime Advanced V15 SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) ICS / OT

May 12, 2021
High 7.5

CVE-2021-27385

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…

Siemens SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F SIMATIC WinCC Runtime Advanced V15 SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) ICS / OT

May 12, 2021
High 7.5

CVE-2021-27386

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…

Siemens SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F SIMATIC WinCC Runtime Advanced V15 ICS / OT

May 12, 2021
Unscored —

CVE-2019-8259

UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read sta…

UltraVNC UltraVNC

Mar 5, 2019
Unscored —

CVE-2019-8260

UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication …

UltraVNC UltraVNC

Mar 5, 2019
Unscored —

CVE-2019-8261

UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multip…

UltraVNC UltraVNC

Mar 5, 2019
Unscored —

CVE-2019-8262

UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which…

UltraVNC UltraVNC

Mar 5, 2019
Unscored —

CVE-2019-8263

UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, wh…

Kaspersky Lab UltraVNC

Mar 5, 2019
Unscored —

CVE-2019-8264

UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentiall…

Kaspersky Lab UltraVNC

Mar 9, 2019
Unscored —

CVE-2019-8265

UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS mac…

Kaspersky Lab UltraVNC

Mar 9, 2019
Unscored —

CVE-2019-8275

UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-o…

Kaspersky Lab UltraVNC

Mar 9, 2019
Unscored —

CVE-2019-8277

UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read st…

Kaspersky Lab UltraVNC

Mar 9, 2019
Unscored —

CVE-2019-8280

UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially r…

Kaspersky Lab UltraVNC

Mar 9, 2019

Revision history

2021-08-10 #2
Updated information for SINAMICS SL150, SINAMICS SM150 and SINAMICS SM150i
2021-05-11 #1
Publication Date

References

SSA-286838: Multiple Vulnerabilities in SINAMICS Medium Voltage Products - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf
SSA-286838: Multiple Vulnerabilities in SINAMICS Medium Voltage Products - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-286838.txt