CVE-2021-27384
published 2021-05-12CVE-2021-27384: A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI…
PriorityP358critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
2.54%
83.2th percentile
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). SmartVNC has an out-of-bounds memory access vulnerability in the device layout handler, represented by a binary data stream on client side, which can potentially result in code execution.
Affected
54 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | simatic_hmi_comfort_outdoor_panels_15_firmware | < 16 | 16 |
| siemens | simatic_hmi_comfort_outdoor_panels_15_firmware | < 15.1 | 15.1 |
| siemens | simatic_hmi_comfort_outdoor_panels_15_firmware | — | — |
| siemens | simatic_hmi_comfort_outdoor_panels_15_firmware | — | — |
| siemens | simatic_hmi_comfort_outdoor_panels_7_firmware | < 16 | 16 |
| siemens | simatic_hmi_comfort_outdoor_panels_7_firmware | < 15.1 | 15.1 |
| siemens | simatic_hmi_comfort_outdoor_panels_7_firmware | — | — |
| siemens | simatic_hmi_comfort_outdoor_panels_7_firmware | — | — |
| siemens | simatic_hmi_comfort_outdoor_panels_v15_7_15 | — | — |
| siemens | simatic_hmi_comfort_outdoor_panels_v16_7_15 | — | — |
| siemens | simatic_hmi_comfort_panels_22_firmware | < 16 | 16 |
| siemens | simatic_hmi_comfort_panels_22_firmware | < 15.1 | 15.1 |
| siemens | simatic_hmi_comfort_panels_22_firmware | — | — |
| siemens | simatic_hmi_comfort_panels_22_firmware | — | — |
| siemens | simatic_hmi_comfort_panels_4_firmware | < 16 | 16 |
| siemens | simatic_hmi_comfort_panels_4_firmware | < 15.1 | 15.1 |
| siemens | simatic_hmi_comfort_panels_4_firmware | — | — |
| siemens | simatic_hmi_comfort_panels_4_firmware | — | — |
| siemens | simatic_hmi_comfort_panels_v15_4_22 | — | — |
| siemens | simatic_hmi_comfort_panels_v16_4_22 | — | — |
| siemens | simatic_hmi_ktp_mobile_panels_ktp400f_firmware | < 16 | 16 |
| siemens | simatic_hmi_ktp_mobile_panels_ktp400f_firmware | < 15.1 | 15.1 |
| siemens | simatic_hmi_ktp_mobile_panels_ktp400f_firmware | — | — |
| siemens | simatic_hmi_ktp_mobile_panels_ktp400f_firmware | — | — |
| siemens | simatic_hmi_ktp_mobile_panels_ktp700_firmware | < 16 | 16 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Siemens SIMATIC HMI Comfort Outdoor Panels up to 16 Update 3 Device Layout out-of-bounds write (ssa-286838)
vuldb·2026-06-03·CVSS 9.8
CVE-2021-27384 [CRITICAL] Siemens SIMATIC HMI Comfort Outdoor Panels up to 16 Update 3 Device Layout out-of-bounds write (ssa-286838)
A vulnerability described as critical has been identified in Siemens SIMATIC HMI Comfort Outdoor Panels, SIMATIC HMI Comfort Panels, SIMATIC HMI KTP Mobile Panels and SIMATIC Wincc Runtime Advanced up to 16 Update 3. This issue affects some unknown processing of the component Device Layout Handler. Executing a manipulation can lead to out-of-bounds write.
This vulnerability is registered as CVE-2021-27384. The attack requires access to the local network. No exploit is available.
A patch should be applied to remediate this issue.
GHSA
GHSA-8885-fhqr-37cx: A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl
ghsa_unreviewed·2022-05-24
CVE-2021-27384 [CRITICAL] CWE-788 GHSA-8885-fhqr-37cx: A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced (All versions < V16 Update 4). SmartVNC has an out-of-bounds memory access vulnerability in the device layout handler, represented by a binary data stream on client side, which can potentially result in code execution.
CISA ICS
Siemens SIMATIC SmartVNC HMI WinCC Products (Update B)
cisa_ics·2021-09-14
Siemens SIMATIC SmartVNC HMI WinCC Products (Update B)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens SIMATIC SmartVNC HMI WinCC Products (Update B)
Last RevisedOctober 14, 2021
Alert CodeICSA-21-131-12
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely
- Vendor: Siemens
- Equipment: SIMATIC HMIs/WinCC Products
- Vulnerabilities: Access of Memory Location After End of Buffer, Improper Handling of Exceptional Conditions, Improper Restriction of Operations within the Bounds of a Memory Buffer, Uncontrolled Resource Consumption
## 2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-21-040-05 Siemens SIMA
CISA ICS
Siemens SINAMICS Medium Voltage Products Remote Access (Update B)
cisa_ics·2021-05-11·CVSS 7.5
[HIGH] Siemens SINAMICS Medium Voltage Products Remote Access (Update B)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens SINAMICS Medium Voltage Products Remote Access (Update B)
Last RevisedAugust 10, 2021
Alert CodeICSA-21-131-04
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely
- Vendor: Siemens
- Equipment: SINAMICS Medium Voltage Products, Remote Access
- Vulnerabilities: Improper Restriction of Operations Within the Bounds of a Memory Buffer, Access of Memory Location After End of Buffer, Uncontrolled Resource Consumption, Improper Initialization, Out-of-Bound Read, Heap-based Buffer Overflow, Stack-based Buffer Overflow, Improper Null Termination
## 2. UPD
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdfhttps://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdfhttps://us-cert.cisa.gov/ics/advisories/icsa-21-131-11https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdfhttps://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdfhttps://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
2021-05-12
Published