Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Vendor: Siemens Component: Simatic Hmi Comfort Panels Firmware Clear all filters
TI-2019-04630 CVE-2019-6577 · GHSA-cxq5-q43p-whjh

Cross-site scripting in Siemens SIMATIC HMI Comfort Panels 4" - 22"

Priority LOW 26

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15.1 Update 1), SIMATIC HMI KTP Mobile Panels KTP40…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00876 Published 2019-05-14 No fix listed CWE-80
TI-2019-04629 CVE-2019-6576 · GHSA-6vg7-p7hj-4575

Cryptographic flaw in Siemens SIMATIC HMI Comfort Panels 4" - 22"

Priority LOW 32

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15.1 Update 1), SIMATIC HMI KTP Mobile Panels KTP40…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01783 Published 2019-05-14 No fix listed CWE-310
TI-2019-04626 CVE-2019-6572 · GHSA-q833-7p8r-rcqc

Information disclosure in Siemens SIMATIC HMI Comfort Panels 4" - 22"

Priority MEDIUM 44

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15.1 Update 1), SIMATIC HMI KTP Mobile Panels KTP40…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02721 Published 2019-05-14 No fix listed CWE-200
TI-2019-04622 CVE-2019-6568 · GHSA-gm8r-2vc4-2wvx

Out-of-bounds read in Siemens SIMATIC CP 1604

Priority MEDIUM 42

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01401 Published 2019-04-17 Fixed in V3.3, V3.2.16 +13 CWE-125
TI-2018-10025 CVE-2018-13814 · GHSA-gvqw-466j-w6vp

HTTP response splitting in Siemens SIMATIC HMI Comfort Panels 4" - 22", SIMATIC HMI…

Priority MEDIUM 41

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V14), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V14), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, K…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01684 Published 2018-12-13 No fix listed CWE-113
TI-2018-10024 CVE-2018-13813 · GHSA-q5p9-4pqr-fw9h

Open redirect in Siemens SIMATIC HMI Comfort Panels 4" - 22", SIMATIC HMI Comfort Outdoor…

Priority LOW 39

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F,…

CVSS 3.0HIGH 8.1 Network No auth User interaction EPSS 0.01681 Published 2018-12-13 No fix listed CWE-601
TI-2018-10023 CVE-2018-13812 · GHSA-v99p-r9xp-cghh

Path traversal in Siemens SIMATIC HMI Comfort Panels 4" - 22", SIMATIC HMI Comfort…

Priority LOW 39

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F,…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03572 Published 2018-12-13 No fix listed CWE-22