Advisories · Technology

Siemens SIMATIC WinCC Runtime Advanced V16.

Every CVE that names Siemens SIMATIC WinCC Runtime Advanced V16 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-27386 CVE record

CVSS 7.5 High

Memory leak in Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS… and others
- Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
- Siemens SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
- Denial of service
Not analysed yet 12 May 2021
CVE-2021-27385 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS… and others
- Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
- Siemens SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
- Denial of service
Not analysed yet 12 May 2021
CVE-2021-27384 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
- Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
- Siemens SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
- Memory corruption
Not analysed yet 12 May 2021
CVE-2021-27383 CVE record

CVSS 7.5 High

Resource allocation without limits in Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS… and others
- Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
- Siemens SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
- Denial of service
Not analysed yet 12 May 2021
CVE-2021-25662 CVE record

CVSS 7.5 High

Improper handling of exceptional conditions in Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS… and others
- Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
- Siemens SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
- CWE-755
Not analysed yet 12 May 2021
CVE-2021-25661 CVE record

CVSS 7.5 High

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
- Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
- Siemens SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
- Memory corruption
Not analysed yet 12 May 2021
CVE-2021-25660 CVE record

CVSS 7.5 High

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
- Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
- Siemens SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
- Memory corruption
Not analysed yet 12 May 2021