Advisories · Technology

Siemens SINAMICS SH150.

Every CVE that names Siemens SINAMICS SH150 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-27386 CVE record

CVSS 7.5 High

Memory leak in Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS… and others
- Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
- Siemens SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
- Denial of service
Not analysed yet 12 May 2021
CVE-2021-27385 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS… and others
- Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
- Siemens SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
- Denial of service
Not analysed yet 12 May 2021
CVE-2021-27384 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
- Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
- Siemens SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
- Memory corruption
Not analysed yet 12 May 2021
CVE-2021-27383 CVE record

CVSS 7.5 High

Resource allocation without limits in Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS… and others
- Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants)
- Siemens SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants)
- Denial of service
Not analysed yet 12 May 2021
CVE-2020-15798 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants) and others
- Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants)
- Siemens SIMATIC HMI KTP Mobile Panels
- Authentication bypass
Not analysed yet 9 Feb 2021