CVE-2021-27385
published 2021-05-12CVE-2021-27385: A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI…
PriorityP343high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
2.53%
83.1th percentile
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). A remote attacker could send specially crafted packets to SmartVNC device layout handler on client side, which could influence the amount of resources consumed and result in a Denial-of-Service (infinite loop) condition.
Affected
54 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | simatic_hmi_comfort_outdoor_panels_15_firmware | < 16 | 16 |
| siemens | simatic_hmi_comfort_outdoor_panels_15_firmware | < 15.1 | 15.1 |
| siemens | simatic_hmi_comfort_outdoor_panels_15_firmware | — | — |
| siemens | simatic_hmi_comfort_outdoor_panels_15_firmware | — | — |
| siemens | simatic_hmi_comfort_outdoor_panels_7_firmware | < 16 | 16 |
| siemens | simatic_hmi_comfort_outdoor_panels_7_firmware | < 15.1 | 15.1 |
| siemens | simatic_hmi_comfort_outdoor_panels_7_firmware | — | — |
| siemens | simatic_hmi_comfort_outdoor_panels_7_firmware | — | — |
| siemens | simatic_hmi_comfort_outdoor_panels_v15_7_15 | — | — |
| siemens | simatic_hmi_comfort_outdoor_panels_v16_7_15 | — | — |
| siemens | simatic_hmi_comfort_panels_22_firmware | < 16 | 16 |
| siemens | simatic_hmi_comfort_panels_22_firmware | < 15.1 | 15.1 |
| siemens | simatic_hmi_comfort_panels_22_firmware | — | — |
| siemens | simatic_hmi_comfort_panels_22_firmware | — | — |
| siemens | simatic_hmi_comfort_panels_4_firmware | < 16 | 16 |
| siemens | simatic_hmi_comfort_panels_4_firmware | < 15.1 | 15.1 |
| siemens | simatic_hmi_comfort_panels_4_firmware | — | — |
| siemens | simatic_hmi_comfort_panels_4_firmware | — | — |
| siemens | simatic_hmi_comfort_panels_v15_4_22 | — | — |
| siemens | simatic_hmi_comfort_panels_v16_4_22 | — | — |
| siemens | simatic_hmi_ktp_mobile_panels_ktp400f_firmware | < 16 | 16 |
| siemens | simatic_hmi_ktp_mobile_panels_ktp400f_firmware | < 15.1 | 15.1 |
| siemens | simatic_hmi_ktp_mobile_panels_ktp400f_firmware | — | — |
| siemens | simatic_hmi_ktp_mobile_panels_ktp400f_firmware | — | — |
| siemens | simatic_hmi_ktp_mobile_panels_ktp700_firmware | < 16 | 16 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Siemens SIMATIC HMI Comfort Outdoor Panels SmartVNC Device Layout resource consumption (ssa-286838)
vuldb·2026-06-03·CVSS 7.5
CVE-2021-27385 [HIGH] Siemens SIMATIC HMI Comfort Outdoor Panels SmartVNC Device Layout resource consumption (ssa-286838)
A vulnerability was found in Siemens SIMATIC HMI Comfort Outdoor Panels, SIMATIC HMI Comfort Panels, SIMATIC HMI KTP Mobile Panels and SIMATIC Wincc Runtime. It has been rated as problematic. Affected is an unknown function of the component SmartVNC Device Layout Handler. The manipulation leads to resource consumption.
This vulnerability is referenced as CVE-2021-27385. Remote exploitation of the attack is possible. No exploit is available.
GHSA
GHSA-w394-4962-55g6: A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl
ghsa_unreviewed·2022-05-24
CVE-2021-27385 [HIGH] CWE-400 GHSA-w394-4962-55g6: A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced (All versions < V16 Update 4). A remote attacker could send specially crafted packets to SmartVNC device layout handler on client side, which could influence the amount of resources consumed and result in a Denial-of-Service (infinite loop) condition.
CISA ICS
Siemens SIMATIC SmartVNC HMI WinCC Products (Update B)
cisa_ics·2021-09-14
Siemens SIMATIC SmartVNC HMI WinCC Products (Update B)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens SIMATIC SmartVNC HMI WinCC Products (Update B)
Last RevisedOctober 14, 2021
Alert CodeICSA-21-131-12
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely
- Vendor: Siemens
- Equipment: SIMATIC HMIs/WinCC Products
- Vulnerabilities: Access of Memory Location After End of Buffer, Improper Handling of Exceptional Conditions, Improper Restriction of Operations within the Bounds of a Memory Buffer, Uncontrolled Resource Consumption
## 2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-21-040-05 Siemens SIMA
CISA ICS
Siemens SINAMICS Medium Voltage Products Remote Access (Update B)
cisa_ics·2021-05-11·CVSS 7.5
[HIGH] Siemens SINAMICS Medium Voltage Products Remote Access (Update B)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens SINAMICS Medium Voltage Products Remote Access (Update B)
Last RevisedAugust 10, 2021
Alert CodeICSA-21-131-04
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely
- Vendor: Siemens
- Equipment: SINAMICS Medium Voltage Products, Remote Access
- Vulnerabilities: Improper Restriction of Operations Within the Bounds of a Memory Buffer, Access of Memory Location After End of Buffer, Uncontrolled Resource Consumption, Improper Initialization, Out-of-Bound Read, Heap-based Buffer Overflow, Stack-based Buffer Overflow, Improper Null Termination
## 2. UPD
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdfhttps://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdfhttps://us-cert.cisa.gov/ics/advisories/icsa-21-131-12https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdfhttps://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdfhttps://us-cert.cisa.gov/ics/advisories/icsa-21-131-12
2021-05-12
Published