Known vulnerabilities in SIMATIC HMI Comfort Panels 4”-22”

Vendor: Siemens
Software: SIMATIC HMI Comfort Panels 4”-22”
Software CPE: cpe:2.3:a:siemens:simatic_hmi_comfort_panels_4”-22”:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 22
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC HMI Comfort Panels 4”-22” SIMATIC HMI Comfort Panels 4”-22” is affected by 22 known vulnerabilities: 1 high, 19 medium, 2 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53147 - Memory corruption
CVE-2021-27386		 CWE-119 Medium
No
No
 16 Update 4 12.05.2021 SB2021051206
#VU53146 - Resource exhaustion
CVE-2021-27385		 CWE-400 Medium
No
No
 16 Update 4 12.05.2021 SB2021051206
#VU53145 - Access of Memory Location After End of Buffer
CVE-2021-27384		 CWE-788 High
No
No
 16 Update 4 12.05.2021 SB2021051206
#VU53144 - Memory corruption
CVE-2021-27383		 CWE-119 Medium
No
No
 16 Update 4 12.05.2021 SB2021051206
#VU53143 - Improper Handling of Exceptional Conditions
CVE-2021-25662		 CWE-755 Medium
No
No
 16 Update 4 12.05.2021 SB2021051206
#VU53142 - Access of Memory Location After End of Buffer
CVE-2021-25661		 CWE-788 Medium
No
No
 16 Update 4 12.05.2021 SB2021051206
#VU53141 - Access of Memory Location After End of Buffer
CVE-2021-25660		 CWE-788 Medium
No
No
 16 Update 4 12.05.2021 SB2021051206
#VU23011 - Out-of-bounds write
CVE-2019-8280		 CWE-787 Medium
No
No
 16 Update 4 27.11.2019 SB2019030902
SB2021051314
#VU23010 - Improper Initialization
CVE-2019-8277		 CWE-665 Medium
No
No
 16 Update 4 27.11.2019 SB2019030902
SB2021051314
#VU22995 - Improper Null Termination
CVE-2019-8275		 CWE-170 Medium
No
No
 16 Update 4 26.11.2019 SB2019030902
SB2021051314
#VU22968 - Out-of-bounds write
CVE-2019-8265		 CWE-787 Medium
No
No
 16 Update 4 25.11.2019 SB2019030902
SB2021051314
#VU22966 - Out-of-bounds write
CVE-2019-8264		 CWE-787 Medium
No
No
 16 Update 4 25.11.2019 SB2019030902
SB2021051314
#VU22965 - Stack-based buffer overflow
CVE-2019-8263		 CWE-121 Medium
No
No
 16 Update 4 25.11.2019 SB2019030902
SB2021051314
#VU22964 - Heap-based Buffer Overflow
CVE-2019-8262		 CWE-122 Medium
No
No
 16 Update 4 25.11.2019 SB2019030902
SB2021051314
#VU22963 - Out-of-bounds read
CVE-2019-8261		 CWE-125 Medium
No
No
 16 Update 4 25.11.2019 SB2019030902
SB2021051314
#VU22962 - Out-of-bounds read
CVE-2019-8260		 CWE-125 Medium
No
No
 16 Update 4 25.11.2019 SB2019030902
SB2021051314
#VU22961 - Missing release of memory after effective lifetime
CVE-2019-8259		 CWE-401 Medium
No
No
 16 Update 4 25.11.2019 SB2019030902
SB2021051314
#VU21971 - Improper input validation
CVE-2019-6575		 CWE-20 Medium
No
No
 - 21.10.2019 SB2019041713
#VU21936 - Resource exhaustion
CVE-2019-10936		 CWE-400 Medium
No
No
 - 18.10.2019 SB2019101013
#VU15887 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-13812		 CWE-22 Medium
No
No
 15 Update 4 13.11.2018 SB2018111410


Showing elements 1 - 20 out of 22