TI-2020-12433 CVE-2020-15798 · GHSA-p3v5-8v5r-qgp2
Missing authentication in Siemens SIMATIC HMI Comfort Panels
Priority MEDIUM 57
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl.
Siemens
Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9
Exploited now
Siemens records in CISA KEVTI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability TI-2026-78793 PHP Memory Corruption Vulnerability TI-2026-78794 PHP Stale Internal Request-State Vulnerability TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records in Sinamics Sl150 Firmware · all components
TI-2021-08877 CVE-2021-27384 · GHSA-8885-fhqr-37cx
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\"…
Priority MEDIUM 54
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
TI-2021-11481 CVE-2021-31337 · GHSA-hwxw-fmr7-f2c3
Missing authentication in SINAMICS Medium Voltage Products
Priority MEDIUM 45
The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote attacker to gain access to the device if the service is enabled.
TI-2021-08881 CVE-2021-27388 · GHSA-78x7-234w-r2hv
Improper input validation in SINAMICS Medium Voltage Products, Remote Access
Priority MEDIUM 45
SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or executi…
TI-2021-08878 CVE-2021-27385 · GHSA-w394-4962-55g6
Uncontrolled resource consumption in Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" &…
Priority MEDIUM 44
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
TI-2019-08156 CVE-2019-10936 · GHSA-vr9v-38cg-fjfp
Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO…
Priority MEDIUM 43
Affected devices improperly handle large amounts of specially crafted UDP packets.
TI-2021-08879 CVE-2021-27386 · GHSA-m7r4-7fmr-p48c
Memory leak in Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\"
Priority MEDIUM 42
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
TI-2021-08876 CVE-2021-27383 · GHSA-2gq5-rpfx-46r3
Resource allocation without limits in Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\"…
Priority MEDIUM 42
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
TI-2019-04622 CVE-2019-6568 · GHSA-gm8r-2vc4-2wvx
Out-of-bounds read in Siemens SIMATIC CP 1604
Priority MEDIUM 42
The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition.
TI-2019-08144 CVE-2019-10923 · GHSA-gm9h-7xvc-jg2f
Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO…
Priority LOW 36
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
TI-2017-01922 CVE-2017-2680 · GHSA-4vvg-656r-c25j
Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO…
Priority LOW 34
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2).