Description
A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 4). Specially crafted packets sent to port 161/udp can cause the SNMP service of affected devices to crash. A manual restart of the device is required to resume operation of the service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) | All versions < V16 Update 4 | — |
| Siemens | SIMATIC HMI KTP Mobile Panels | All versions < V16 Update 4 | — |
Advisories 2
- ICSA-21-131-06 Siemens SNMP Implementation of WinCC Runtime CISA ICS & IT advisories · May 6, 2025
- SSA-594364 SSA-594364: Denial-of-Service Vulnerability in SNMP Implementation of WinCC Runtime Siemens ProductCERT · May 11, 2021