Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2021-27384 Details

Description

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). SmartVNC has an out-of-bounds memory access vulnerability in the device layout handler, represented by a binary data stream on client side, which can potentially result in code execution.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNA: CISA-ADPCVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf	CVE	PatchVendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdf	CVE	PatchVendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11	CVE	Third Party AdvisoryUS Government Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf	[email protected]	PatchVendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdf	[email protected]	PatchVendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11	[email protected]	Third Party AdvisoryUS Government Resource

see all 6 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-788	Access of Memory Location After End of Buffer	[email protected]

Affected Products

Product	Versions
siemens simatic wincc runtime advanced	< 16 16 - 16 update1 16 update2 16 update3
CPE cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:::::::: cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:16:-:::::: cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:16:update1:::::: cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:16:update2:::::: cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:16:update3:::::: cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:-:::::: cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:update1:::::: cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:update2:::::: cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:update3:::::: cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:update4:::::: cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:update5:::::: Remediation No remediation found in references.
siemens sinamics sh150 firmware	All versions
CPE cpe:2.3:o:siemens:sinamics_sh150_firmware:::::::: Remediation No remediation found in references.
siemens sinamics sh150	All versions
CPE cpe:2.3:h:siemens:sinamics_sh150:-:::::::* Remediation No remediation found in references.
siemens sinamics sm150i firmware	All versions
CPE cpe:2.3:o:siemens:sinamics_sm150i_firmware:::::::: Remediation No remediation found in references.
siemens sinamics sm150i	All versions
CPE cpe:2.3:h:siemens:sinamics_sm150i:-:::::::* Remediation No remediation found in references.
siemens sinamics gh150 firmware	All versions
CPE cpe:2.3:o:siemens:sinamics_gh150_firmware:::::::: Remediation No remediation found in references.
siemens sinamics gh150	All versions
CPE cpe:2.3:h:siemens:sinamics_gh150:-:::::::* Remediation No remediation found in references.
siemens sinamics gl150 firmware	All versions
CPE cpe:2.3:o:siemens:sinamics_gl150_firmware:::::::: Remediation No remediation found in references.
siemens sinamics gl150	All versions
CPE cpe:2.3:h:siemens:sinamics_gl150:-:::::::* Remediation No remediation found in references.
siemens sinamics gm150 firmware	All versions
CPE cpe:2.3:o:siemens:sinamics_gm150_firmware:::::::: Remediation No remediation found in references.
siemens sinamics gm150	All versions
CPE cpe:2.3:h:siemens:sinamics_gm150:-:::::::* Remediation No remediation found in references.
siemens sinamics sl150 firmware	All versions
CPE cpe:2.3:o:siemens:sinamics_sl150_firmware:::::::: Remediation No remediation found in references.
siemens sinamics sl150	All versions
CPE cpe:2.3:h:siemens:sinamics_sl150:-:::::::* Remediation No remediation found in references.
siemens sinamics sm120 firmware	All versions
CPE cpe:2.3:o:siemens:sinamics_sm120_firmware:::::::: Remediation No remediation found in references.
siemens sinamics sm120	All versions
CPE cpe:2.3:h:siemens:sinamics_sm120:-:::::::* Remediation No remediation found in references.
siemens sinamics sm150 firmware	All versions
CPE cpe:2.3:o:siemens:sinamics_sm150_firmware:::::::: Remediation No remediation found in references.
siemens sinamics sm150	All versions
CPE cpe:2.3:h:siemens:sinamics_sm150:-:::::::* Remediation No remediation found in references.
siemens simatic hmi comfort outdoor panels 7" firmware	< 16 16 - 16 update1 16 update2 16 update3
CPE cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7"_firmware:::::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7"_firmware:16:-:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7"_firmware:16:update1:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7"_firmware:16:update2:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7"_firmware:16:update3:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7"_firmware:15.1:-:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7"_firmware:15.1:update1:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7"_firmware:15.1:update2:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7"_firmware:15.1:update3:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7"_firmware:15.1:update4:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7"_firmware:15.1:update5:::::: Remediation No remediation found in references.
siemens simatic hmi comfort outdoor panels 7"	All versions
CPE cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels_7":-:::::::* Remediation No remediation found in references.
siemens simatic hmi comfort outdoor panels 15" firmware	< 16 16 16 - 16 update1 16 update2
CPE cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15"_firmware:::::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15"_firmware:16:::::::* cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15"_firmware:16:-:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15"_firmware:16:update1:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15"_firmware:16:update2:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15"_firmware:16:update3:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15"_firmware:15.1:-:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15"_firmware:15.1:update1:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15"_firmware:15.1:update2:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15"_firmware:15.1:update3:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15"_firmware:15.1:update4:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15"_firmware:15.1:update5:::::: Remediation No remediation found in references.
siemens simatic hmi comfort outdoor panels 15"	All versions
CPE cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels_15":-:::::::* Remediation No remediation found in references.
siemens simatic hmi comfort panels 4" firmware	< 16 16 - 16 update1 16 update2 16 update3
CPE cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4"_firmware:::::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4"_firmware:16:-:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4"_firmware:16:update1:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4"_firmware:16:update2:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4"_firmware:16:update3:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4"_firmware:15.1:-:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4"_firmware:15.1:update1:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4"_firmware:15.1:update2:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4"_firmware:15.1:update3:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4"_firmware:15.1:update4:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4"_firmware:15.1:update5:::::: Remediation No remediation found in references.
siemens simatic hmi comfort panels 4"	All versions
CPE cpe:2.3:h:siemens:simatic_hmi_comfort_panels_4":-:::::::* Remediation No remediation found in references.
siemens simatic hmi comfort panels 22" firmware	< 16 16 - 16 update1 16 update2 16 update3
CPE cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22"_firmware:::::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22"_firmware:16:-:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22"_firmware:16:update1:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22"_firmware:16:update2:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22"_firmware:16:update3:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22"_firmware:15.1:-:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22"_firmware:15.1:update1:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22"_firmware:15.1:update2:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22"_firmware:15.1:update3:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22"_firmware:15.1:update4:::::: cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22"_firmware:15.1:update5:::::: Remediation No remediation found in references.
siemens simatic hmi comfort panels 22"	All versions
CPE cpe:2.3:h:siemens:simatic_hmi_comfort_panels_22":-:::::::* Remediation No remediation found in references.
siemens simatic hmi ktp mobile panels ktp400f firmware	< 16 16 - 16 update1 16 update2 16 update3
CPE cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:::::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:16:-:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:16:update1:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:16:update2:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:16:update3:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:-:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:update1:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:update2:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:update3:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:update4:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:update5:::::: Remediation No remediation found in references.
siemens simatic hmi ktp mobile panels ktp400f	All versions
CPE cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp400f:-:::::::* Remediation No remediation found in references.
siemens simatic hmi ktp mobile panels ktp700 firmware	< 16 16 - 16 update1 16 update2 16 update3
CPE cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:::::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:16:-:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:16:update1:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:16:update2:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:16:update3:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:-:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:update1:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:update2:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:update3:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:update4:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:update5:::::: Remediation No remediation found in references.
siemens simatic hmi ktp mobile panels ktp700	All versions
CPE cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp700:-:::::::* Remediation No remediation found in references.
siemens simatic hmi ktp mobile panels ktp700f firmware	< 16 16 - 16 update1 16 update2 16 update3
CPE cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:::::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:16:-:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:16:update1:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:16:update2:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:16:update3:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:-:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:update1:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:update2:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:update3:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:update4:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:update5:::::: Remediation No remediation found in references.
siemens simatic hmi ktp mobile panels ktp700f	All versions
CPE cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp700f:-:::::::* Remediation No remediation found in references.
siemens simatic hmi ktp mobile panels ktp900 firmware	< 16 16 - 16 update1 16 update2 16 update3
CPE cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:::::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:16:-:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:16:update1:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:16:update2:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:16:update3:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:-:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:update1:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:update2:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:update3:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:update4:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:update5:::::: Remediation No remediation found in references.
siemens simatic hmi ktp mobile panels ktp900	All versions
CPE cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp900:-:::::::* Remediation No remediation found in references.
siemens simatic hmi ktp mobile panels ktp900f firmware	< 16 16 - 16 update1 16 update2 16 update3
CPE cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:::::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:16:-:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:16:update1:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:16:update2:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:16:update3:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:-:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:update1:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:update2:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:update3:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:update4:::::: cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:update5:::::: Remediation No remediation found in references.
siemens simatic hmi ktp mobile panels ktp900f	All versions
CPE cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp900f:-:::::::* Remediation No remediation found in references.

Change History

11 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	[email protected]
Jun 2, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Dec 16, 2021	Modified Analysis	[email protected]
Oct 12, 2021	CVE Modified	[email protected]
Sep 14, 2021	CVE Modified	[email protected]
Aug 10, 2021	CVE Modified	[email protected]
May 21, 2021	Initial Analysis	[email protected]
May 17, 2021	CVE Modified	[email protected]

CVE-2021-27384 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO