CVE Feed

    Dashboard / CVE / CVE-2019-19276

    CVE-2019-19276

    A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 4). Specially crafted packets sent to port 161/udp can cause the SNMP service of affected devices to crash. A manual restart of the device is required to resume operation of the service.

    Published:May 12, 2021
    Last Modified:Nov 21, 2024
    EPS:May 12, 2021
    EPSS Score:0.00156
    CVSS Score:5.3

    Affected Products

    Vendor
    Siemens
    Product
    Simatic Hmi Comfort Panels
    Vendor
    Siemens
    Product
    Simatic Hmi Comfort Panels Firmware
    Vendor
    Siemens
    Product
    Simatic Hmi Ktp Mobile Panels
    Vendor
    Siemens
    Product
    Simatic Hmi Ktp Mobile Panels Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-40227 (CVSS 7.5) — A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V17 …
    CVE-2020-15798 (CVSS 9.8) — A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 …
    CVE-2020-15786 (CVSS 9.8) — A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All ve…
    CVE-2020-7592 (CVSS 6.5) — A vulnerability has been identified in SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants) (All ve…
    CVE-2019-6577 (CVSS 5.4) — A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SI…
    CVE-2019-6572 (CVSS 9.1) — A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SI…
    CVE-2019-6576 (CVSS 6.5) — A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SI…
    CVE-2019-6568 (CVSS 7.5) — The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition…
    CVE-2018-13812 (CVSS 7.5) — A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMA…
    CVE-2018-13813 (CVSS 8.1) — A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMA…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High