Skip to content
OpenAdvisories
High SSA-384224 1 CVE

SSA-384224: Denial of Service Vulnerability in SIMATIC HMI Panels

Published Oct 11, 2022 · Updated Oct 11, 2022

Vendor: Siemens Product: SIMATIC HMI Comfort Panels (incl. SIPLUS variants) Product: SIMATIC HMI KTP Mobile Panels Product: SIMATIC HMI KTP1200 Basic (6AV2123-2MB03-0AX0) Product: SIMATIC HMI KTP400 Basic (6AV2123-2DB03-0AX0) Product: SIMATIC HMI KTP700 Basic (6AV2123-2GB03-0AX0) Product: SIMATIC HMI KTP900 Basic (6AV2123-2JB03-0AX0) Product: SIPLUS HMI KTP1200 BASIC (6AG1123-2MB03-2AX0) Product: SIPLUS HMI KTP400 BASIC (6AG1123-2DB03-2AX0) Product: SIPLUS HMI KTP700 BASIC (6AG1123-2GB03-2AX0) Product: SIPLUS HMI KTP900 BASIC (6AG1123-2JB03-2AX0)

Summary

Several SIMATIC HMI Panels are affected by a vulnerability that could allow an attacker to cause a permanent denial of service condition (requiring a device reboot) by sending specially crafted TCP packets.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #1

    Publication Date

References