CVE-2021-25662

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Comfort Outdoor Panels V15 versions 7" & 15" (incl. SIPLUS variants) through V15.1 Update 5 SIMATIC HMI Comfort Outdoor Panels V16 versions 7" & 15" (incl. SIPLUS variants) through V16 Update 3 SIMATIC HMI Comfort Panels V15 versions 4" - 22" (incl. SIPLUS variants) through V15.1 Update 5 SIMATIC HMI Comfort Panels V16 versions 4" - 22" (incl. SIPLUS variants) through V16 Update 3 SIMATIC HMI KTP Mobile Panels V15 versions KTP400F, KTP700, KTP700F, KTP900, and KTP900F through V15.1 Update 5 SIMATIC HMI KTP Mobile Panels V16 versions KTP400F, KTP700, KTP700F, KTP900, and KTP900F through V16 Update 3 SIMATIC WinCC Runtime Advanced V15 through V15.1 Update 5 SIMATIC WinCC Runtime Advanced V16 through V16 Update 3

Description A Denial-of-Service condition could occur due to the SmartVNC client's failure to handle an exception properly if the program execution process is modified after sending a packet from the server.

Recommendations For SIMATIC HMI Comfort Outdoor Panels V15, update to V15.1 Update 6 or later. For SIMATIC HMI Comfort Outdoor Panels V16, update to V16 Update 4 or later. For SIMATIC HMI Comfort Panels V15, update to V15.1 Update 6 or later. For SIMATIC HMI Comfort Panels V16, update to V16 Update 4 or later. For SIMATIC HMI KTP Mobile Panels V15, update to V15.1 Update 6 or later. For SIMATIC HMI KTP Mobile Panels V16, update to V16 Update 4 or later. For SIMATIC WinCC Runtime Advanced V15, update to V15.1 Update 6 or later. For SIMATIC WinCC Runtime Advanced V16, update to V16 Update 4 or later.