CVE-2019-19276: Siemens SIMATIC HMI Comfort Panels 1st Generation

Описание

Оригинално описание

A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 4). Specially crafted packets sent to port 161/udp can cause the SNMP service of affected devices to crash. A manual restart of the device is required to resume operation of the service.

Засегнати продукти

• Siemens SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants): All versions < V16 Update 4
• Siemens SIMATIC HMI KTP Mobile Panels: All versions < V16 Update 4

Вид слабост

• CWE-787 Out-of-bounds Write

История

Други уязвимости в Siemens SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants)

• 7.5CVE-2022-40227
• 9.8CVE-2020-15798
• 7.5CVE-2019-10936

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2019-19276
• https://nvd.nist.gov/vuln/detail/CVE-2019-19276
• https://cert-portal.siemens.com/productcert/pdf/ssa-594364.pdf