CVE-2019-19276 - A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl

Back Back to CVE browser

MEDIUM

A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl

Published May 12, 2021

5.3

MEDIUM

CVSS 3.1

EPSS 1.02%

Description

A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 4). Specially crafted packets sent to port 161/udp can cause the SNMP service of affected devices to crash. A manual restart of the device is required to resume operation of the service.

Affected products

Vendor Siemens Product SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) Default
n/a
- Version
  All versions < V16 Update 4
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC HMI KTP Mobile Panels Default
n/a
- Version
  All versions < V16 Update 4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Siemens

SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants)

n/a

Version	Status	Constraints
All versions < V16 Update 4	affected	-

Siemens

SIMATIC HMI KTP Mobile Panels

n/a

Version	Status	Constraints
All versions < V16 Update 4	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (2)

https://cert-portal.siemens.com/productcert/pdf/ssa-594364.pdf
x_refsource_MISCPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8900
Advisory

Link	Providers	Tags
https://cert-portal.siemens.com/productcert/pdf/ssa-594364.pdf		x_refsource_MISCPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8900		Advisory