A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 4). Specially crafted packets sent to port 161/udp can cause the SNMP service of affected devices to crash. A manual restart of the device is required to resume operation of the service.
| Software | From | Fixed in |
|---|---|---|
| siemens / simatic_hmi_comfort_panels_firmware | 16 | 16.x |
| siemens / simatic_hmi_comfort_panels_firmware | 16-update_2 | 16-update_2.x |
| siemens / simatic_hmi_comfort_panels_firmware | 16-update_3 | 16-update_3.x |
| siemens / simatic_hmi_ktp_mobile_panels_firmware | 16 | 16.x |
| siemens / simatic_hmi_ktp_mobile_panels_firmware | 16-update_2 | 16-update_2.x |
| siemens / simatic_hmi_ktp_mobile_panels_firmware | 16-update_3 | 16-update_3.x |