Description
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4). SmartVNC has an out-of-bounds memory access vulnerability that could be triggered on the server side when sending data from the client, which could result in a Denial-of-Service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) | All versions < V15.1 Update 6 | — |
| Siemens | SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) | All versions < V16 Update 4 | — |
| Siemens | SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) | All versions < V15.1 Update 6 | — |
| Siemens | SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) | All versions < V16 Update 4 | — |
| Siemens | SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F | All versions < V15.1 Update 6 | — |
| Siemens | SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F | All versions < V16 Update 4 | — |
| Siemens | SIMATIC WinCC Runtime Advanced V15 | All versions < V15.1 Update 6 | — |
| Siemens | SIMATIC WinCC Runtime Advanced V16 | All versions < V16 Update 4 | — |
Advisories 2
- ICSA-21-131-12 Siemens SIMATIC SmartVNC HMI WinCC Products (Update B) CISA ICS & IT advisories · May 6, 2025
- SSA-538778 SSA-538778: SmartVNC Vulnerabilities in SIMATIC HMI/WinCC Products Siemens ProductCERT · Oct 12, 2021