Skip to content
OpenAdvisories
Critical SSA-538778 7 CVEs

SSA-538778: SmartVNC Vulnerabilities in SIMATIC HMI/WinCC Products

Published May 11, 2021 · Updated Oct 12, 2021 · Revision 3

Vendor: Siemens Product: SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) Product: SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) Product: SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) Product: SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) Product: SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F Product: SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F Product: SIMATIC WinCC Runtime Advanced V15 Product: SIMATIC WinCC Runtime Advanced V16

Summary

Multiple SmartVNC vulnerabilities in the affected products listed below could allow remote code execution and Denial-of-Service attacks under certain conditions.

Siemens has released updates for the affected products and recommends to update to the latest version.

Vulnerabilities 7

Revision history

  1. #3

    V15 sub-version numbering correction

  2. #2

    Added additional solution for all products

  3. #1

    Publication Date

References