Known vulnerabilities in SIMATIC HMI KTP900F

Vendor: Siemens
Software: SIMATIC HMI KTP900F
Software CPE: cpe:2.3:a:siemens:simatic_hmi_ktp900f:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 20
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC HMI KTP900F SIMATIC HMI KTP900F is affected by 20 known vulnerabilities: 1 high, 17 medium, 2 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53147 - Memory corruption
CVE-2021-27386		 CWE-119 Medium
No
No
 16 Update 4 12.05.2021 SB2021051206
#VU53146 - Resource exhaustion
CVE-2021-27385		 CWE-400 Medium
No
No
 16 Update 4 12.05.2021 SB2021051206
#VU53145 - Access of Memory Location After End of Buffer
CVE-2021-27384		 CWE-788 High
No
No
 16 Update 4 12.05.2021 SB2021051206
#VU53144 - Memory corruption
CVE-2021-27383		 CWE-119 Medium
No
No
 16 Update 4 12.05.2021 SB2021051206
#VU53143 - Improper Handling of Exceptional Conditions
CVE-2021-25662		 CWE-755 Medium
No
No
 16 Update 4 12.05.2021 SB2021051206
#VU53142 - Access of Memory Location After End of Buffer
CVE-2021-25661		 CWE-788 Medium
No
No
 16 Update 4 12.05.2021 SB2021051206
#VU53141 - Access of Memory Location After End of Buffer
CVE-2021-25660		 CWE-788 Medium
No
No
 16 Update 4 12.05.2021 SB2021051206
#VU23011 - Out-of-bounds write
CVE-2019-8280		 CWE-787 Medium
No
No
 16 Update 4 27.11.2019 SB2019030902
SB2021051314
#VU23010 - Improper Initialization
CVE-2019-8277		 CWE-665 Medium
No
No
 16 Update 4 27.11.2019 SB2019030902
SB2021051314
#VU22995 - Improper Null Termination
CVE-2019-8275		 CWE-170 Medium
No
No
 16 Update 4 26.11.2019 SB2019030902
SB2021051314
#VU22968 - Out-of-bounds write
CVE-2019-8265		 CWE-787 Medium
No
No
 16 Update 4 25.11.2019 SB2019030902
SB2021051314
#VU22966 - Out-of-bounds write
CVE-2019-8264		 CWE-787 Medium
No
No
 16 Update 4 25.11.2019 SB2019030902
SB2021051314
#VU22965 - Stack-based buffer overflow
CVE-2019-8263		 CWE-121 Medium
No
No
 16 Update 4 25.11.2019 SB2019030902
SB2021051314
#VU22964 - Heap-based Buffer Overflow
CVE-2019-8262		 CWE-122 Medium
No
No
 16 Update 4 25.11.2019 SB2019030902
SB2021051314
#VU22963 - Out-of-bounds read
CVE-2019-8261		 CWE-125 Medium
No
No
 16 Update 4 25.11.2019 SB2019030902
SB2021051314
#VU22962 - Out-of-bounds read
CVE-2019-8260		 CWE-125 Medium
No
No
 16 Update 4 25.11.2019 SB2019030902
SB2021051314
#VU22961 - Missing release of memory after effective lifetime
CVE-2019-8259		 CWE-401 Medium
No
No
 16 Update 4 25.11.2019 SB2019030902
SB2021051314
#VU15888 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-13813		 CWE-601 Low
No
No
 15 Update 4 14.11.2018 SB2018111410
#VU15887 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-13812		 CWE-22 Medium
No
No
 15 Update 4 13.11.2018 SB2018111410
#VU15889 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2018-13814		 CWE-113 Low
No
No
 15 Update 4 13.11.2018 SB2018111410