SSA-478893: TightVNC Vulnerabilities in Industrial Products (Revoked)
Multiple TightVNC (V1.x) vulnerabilities could allow remote code execution and Denial-of-Service attacks under certain conditions. Siemens has previously released this advisory containing a set of products that were considered to be affected. Through Siemens' continuous investigation processes it was identified that all products previously advised are not affected by any vulnerability listed in this advisory.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-8287US | critical9.8 | — | ||
TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via… | ||||
| CVE-2019-15680US | high7.5 | — | ||
TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network con… | ||||
| CVE-2019-15679US | critical9.8 | — | ||
TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear to be exploitable vi… | ||||
| CVE-2019-15678US | critical9.8 | — | ||
TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This attack appear to be exploitable via netwo… | ||||
references
External citations — patches, advisories, analysis.
remediations (44)
- FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1500 V3.1
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1500 V3.1
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1500 V3.1
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1500 V3.1
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1500 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1500 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1500 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1500 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1900 V3.1
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1900 V3.1
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1900 V3.1
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1900 V3.1
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1900 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1900 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1900 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC1900 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC2200 V3.1
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC2200 V3.1
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC2200 V3.1
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC2200 V3.1
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC2200 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC2200 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC2200 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC ITC2200 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC WinCC Runtime Advanced
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC WinCC Runtime Advanced
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC WinCC Runtime Advanced
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC WinCC Runtime Advanced
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC WinCC Runtime Professional
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC WinCC Runtime Professional
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC WinCC Runtime Professional
This product is not affected by any vulnerability listed in this advisory
- FixedSIMATIC WinCC Runtime Professional
This product is not affected by any vulnerability listed in this advisory
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan