First published: Wed May 12 2021(Updated: )
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4). SmartVNC has an out-of-bounds memory access vulnerability that could be triggered on the client side when sending data from the server, which could result in a Denial-of-Service condition.
Credit: productcert@siemens.com
Affected Software | Affected Version | How to fix |
---|---|---|
Siemens SIMATIC WinCC Runtime Advanced | <16 | |
Siemens SIMATIC WinCC Runtime Advanced | =16 | |
Siemens SIMATIC WinCC Runtime Advanced | =16-update1 | |
Siemens SIMATIC WinCC Runtime Advanced | =16-update2 | |
Siemens SIMATIC WinCC Runtime Advanced | =16-update3 | |
siemens SIMATIC HMI Comfort Outdoor Panels 7\" firmware | <16 | |
siemens SIMATIC HMI Comfort Outdoor Panels 7\" firmware | =16 | |
siemens SIMATIC HMI Comfort Outdoor Panels 7\" firmware | =16-update1 | |
siemens SIMATIC HMI Comfort Outdoor Panels 7\" firmware | =16-update2 | |
siemens SIMATIC HMI Comfort Outdoor Panels 7\" firmware | =16-update3 | |
siemens SIMATIC HMI Comfort Outdoor Panels 7\" | ||
siemens SIMATIC HMI Comfort Outdoor Panels 15\" firmware | <16 | |
siemens SIMATIC HMI Comfort Outdoor Panels 15\" firmware | =16 | |
siemens SIMATIC HMI Comfort Outdoor Panels 15\" firmware | =16 | |
siemens SIMATIC HMI Comfort Outdoor Panels 15\" firmware | =16-update1 | |
siemens SIMATIC HMI Comfort Outdoor Panels 15\" firmware | =16-update2 | |
siemens SIMATIC HMI Comfort Outdoor Panels 15\" firmware | =16-update3 | |
siemens SIMATIC HMI Comfort Outdoor Panels 15\" | ||
siemens SIMATIC HMI Comfort Panels 4\" firmware | <16 | |
siemens SIMATIC HMI Comfort Panels 4\" firmware | =16 | |
siemens SIMATIC HMI Comfort Panels 4\" firmware | =16-update1 | |
siemens SIMATIC HMI Comfort Panels 4\" firmware | =16-update2 | |
siemens SIMATIC HMI Comfort Panels 4\" firmware | =16-update3 | |
siemens SIMATIC HMI Comfort Panels 4\" | ||
siemens SIMATIC HMI Comfort Panels 22\" firmware | <16 | |
siemens SIMATIC HMI Comfort Panels 22\" firmware | =16 | |
siemens SIMATIC HMI Comfort Panels 22\" firmware | =16-update1 | |
siemens SIMATIC HMI Comfort Panels 22\" firmware | =16-update2 | |
siemens SIMATIC HMI Comfort Panels 22\" firmware | =16-update3 | |
siemens SIMATIC HMI Comfort Panels 22\" | ||
Siemens Simatic Hmi Ktp Mobile Panels Ktp400f Firmware | <16 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp400f Firmware | =16 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp400f Firmware | =16-update1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp400f Firmware | =16-update2 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp400f Firmware | =16-update3 | |
Siemens SIMATIC HMI Mobile Panels | ||
Siemens Simatic Hmi Ktp Mobile Panels Ktp700 Firmware | <16 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700 Firmware | =16 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700 Firmware | =16-update1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700 Firmware | =16-update2 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700 Firmware | =16-update3 | |
Siemens SIMATIC HMI Mobile Panels | ||
Siemens Simatic Hmi Ktp Mobile Panels Ktp700f Firmware | <16 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700f Firmware | =16 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700f Firmware | =16-update1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700f Firmware | =16-update2 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700f Firmware | =16-update3 | |
Siemens SIMATIC HMI Mobile Panels | ||
Siemens Simatic Hmi Ktp Mobile Panels Ktp900 Firmware | <16 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900 Firmware | =16 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900 Firmware | =16-update1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900 Firmware | =16-update2 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900 Firmware | =16-update3 | |
Siemens SIMATIC HMI Mobile Panels | ||
Siemens Simatic Hmi Ktp Mobile Panels Ktp900f Firmware | <16 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900f Firmware | =16 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900f Firmware | =16-update1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900f Firmware | =16-update2 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900f Firmware | =16-update3 | |
Siemens SIMATIC HMI Mobile Panels | ||
siemens SIMATIC HMI Comfort Outdoor Panels 7\" firmware | <15.1 | |
siemens SIMATIC HMI Comfort Outdoor Panels 7\" firmware | =15.1 | |
siemens SIMATIC HMI Comfort Outdoor Panels 7\" firmware | =15.1-update1 | |
siemens SIMATIC HMI Comfort Outdoor Panels 7\" firmware | =15.1-update2 | |
siemens SIMATIC HMI Comfort Outdoor Panels 7\" firmware | =15.1-update3 | |
siemens SIMATIC HMI Comfort Outdoor Panels 7\" firmware | =15.1-update4 | |
siemens SIMATIC HMI Comfort Outdoor Panels 7\" firmware | =15.1-update5 | |
siemens SIMATIC HMI Comfort Outdoor Panels 15\" firmware | <15.1 | |
siemens SIMATIC HMI Comfort Outdoor Panels 15\" firmware | =15.1 | |
siemens SIMATIC HMI Comfort Outdoor Panels 15\" firmware | =15.1-update1 | |
siemens SIMATIC HMI Comfort Outdoor Panels 15\" firmware | =15.1-update2 | |
siemens SIMATIC HMI Comfort Outdoor Panels 15\" firmware | =15.1-update3 | |
siemens SIMATIC HMI Comfort Outdoor Panels 15\" firmware | =15.1-update4 | |
siemens SIMATIC HMI Comfort Outdoor Panels 15\" firmware | =15.1-update5 | |
siemens SIMATIC HMI Comfort Panels 4\" firmware | <15.1 | |
siemens SIMATIC HMI Comfort Panels 4\" firmware | =15.1 | |
siemens SIMATIC HMI Comfort Panels 4\" firmware | =15.1-update1 | |
siemens SIMATIC HMI Comfort Panels 4\" firmware | =15.1-update2 | |
siemens SIMATIC HMI Comfort Panels 4\" firmware | =15.1-update3 | |
siemens SIMATIC HMI Comfort Panels 4\" firmware | =15.1-update4 | |
siemens SIMATIC HMI Comfort Panels 4\" firmware | =15.1-update5 | |
siemens SIMATIC HMI Comfort Panels 22\" firmware | <15.1 | |
siemens SIMATIC HMI Comfort Panels 22\" firmware | =15.1 | |
siemens SIMATIC HMI Comfort Panels 22\" firmware | =15.1-update1 | |
siemens SIMATIC HMI Comfort Panels 22\" firmware | =15.1-update2 | |
siemens SIMATIC HMI Comfort Panels 22\" firmware | =15.1-update3 | |
siemens SIMATIC HMI Comfort Panels 22\" firmware | =15.1-update4 | |
siemens SIMATIC HMI Comfort Panels 22\" firmware | =15.1-update5 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp400f Firmware | <15.1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp400f Firmware | =15.1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp400f Firmware | =15.1-update1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp400f Firmware | =15.1-update2 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp400f Firmware | =15.1-update3 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp400f Firmware | =15.1-update4 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp400f Firmware | =15.1-update5 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700 Firmware | <15.1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700 Firmware | =15.1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700 Firmware | =15.1-update1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700 Firmware | =15.1-update2 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700 Firmware | =15.1-update3 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700 Firmware | =15.1-update4 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700 Firmware | =15.1-update5 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700f Firmware | <15.1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700f Firmware | =15.1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700f Firmware | =15.1-update1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700f Firmware | =15.1-update2 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700f Firmware | =15.1-update3 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700f Firmware | =15.1-update4 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp700f Firmware | =15.1-update5 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900 Firmware | <15.1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900 Firmware | =15.1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900 Firmware | =15.1-update1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900 Firmware | =15.1-update2 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900 Firmware | =15.1-update3 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900 Firmware | =15.1-update4 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900 Firmware | =15.1-update5 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900f Firmware | <15.1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900f Firmware | =15.1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900f Firmware | =15.1-update1 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900f Firmware | =15.1-update2 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900f Firmware | =15.1-update3 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900f Firmware | =15.1-update4 | |
Siemens Simatic Hmi Ktp Mobile Panels Ktp900f Firmware | =15.1-update5 | |
Siemens SIMATIC WinCC Runtime Advanced | <15.1 | |
Siemens SIMATIC WinCC Runtime Advanced | =15.1 | |
Siemens SIMATIC WinCC Runtime Advanced | =15.1-update1 | |
Siemens SIMATIC WinCC Runtime Advanced | =15.1-update2 | |
Siemens SIMATIC WinCC Runtime Advanced | =15.1-update3 | |
Siemens SIMATIC WinCC Runtime Advanced | =15.1-update4 | |
Siemens SIMATIC WinCC Runtime Advanced | =15.1-update5 | |
Siemens SIMATIC HMI Comfort Outdoor Panels v15 7’ and 15’ (incl. SIPLUS variants) Update 6 | <15.1 | 15.1 |
Siemens SIMATIC HMI Comfort Panels | <15.1 | 15.1 |
Siemens SIMATIC HMI KTP Mobile Panels v15 KTP400F, KTP700, KTP700F, KTP900, KTP900F Update 6 | <15.1 | 15.1 |
Siemens SIMATIC WinCC Runtime Advanced | <15.1 | 15.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-25661 has a CVSS score that indicates a high severity rating, potentially allowing unauthorized access to sensitive information.
To fix CVE-2021-25661, ensure that you update the affected Siemens products to the latest version, specifically versions 15.1 or newer.
Affected Siemens products include SIMATIC HMI Comfort Outdoor Panels, Comfort Panels, and KTP Mobile Panels running versions prior to 15.1 Update 6.
Yes, CVE-2021-25661 can be potentially exploited remotely, allowing attackers to gain unauthorized access under certain conditions.
There are no known workarounds for CVE-2021-25661, and the only solution is to apply the necessary updates to the affected systems.