Skip to content
OpenAdvisories
Critical SSA-940818 10 CVEs

SSA-940818: UltraVNC Vulnerabilities in SIMATIC HMIs/WinCC Products

Published May 11, 2021 · Updated May 11, 2021

Vendor: Siemens Product: SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants) Product: SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants) Product: SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F Product: SIMATIC WinCC Runtime Advanced

Summary

UltraVNC vulnerabilities in the affected products listed below could allow remote code execution, information disclosure and Denial-of-Service attacks under certain conditions.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 10

  • Unscored —
    CVE-2019-8259

    UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read sta…

    UltraVNC UltraVNC
  • Unscored —
    CVE-2019-8260

    UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication …

    UltraVNC UltraVNC
  • Unscored —
    CVE-2019-8261

    UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multip…

    UltraVNC UltraVNC
  • Unscored —
    CVE-2019-8262

    UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which…

    UltraVNC UltraVNC
  • Unscored —
    CVE-2019-8263

    UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, wh…

    Kaspersky Lab UltraVNC
  • Unscored —
    CVE-2019-8264

    UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentiall…

    Kaspersky Lab UltraVNC
  • Unscored —
    CVE-2019-8265

    UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS mac…

    Kaspersky Lab UltraVNC
  • Unscored —
    CVE-2019-8275

    UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-o…

    Kaspersky Lab UltraVNC
  • Unscored —
    CVE-2019-8277

    UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read st…

    Kaspersky Lab UltraVNC
  • Unscored —
    CVE-2019-8280

    UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially r…

    Kaspersky Lab UltraVNC

Revision history

  1. #1

    Publication Date

References