SSA-940818: UltraVNC Vulnerabilities in SIMATIC HMIs/WinCC Products
UltraVNC vulnerabilities in the affected products listed below could allow remote code execution, information disclosure and Denial-of-Service attacks under certain conditions. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-8280US | critical9.8 | — | ||
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable vi… | ||||
| CVE-2019-8277US | high7.5 | — | ||
UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Comb… | ||||
| CVE-2019-8275US | critical9.8 | — | ||
UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appe… | ||||
| CVE-2019-8265US | critical9.8 | — | ||
UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which can potentially result in code e… | ||||
| CVE-2019-8264US | critical9.8 | — | ||
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution. This attack appears to be exploit… | ||||
| CVE-2019-8263US | medium6.5 | — | ||
UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, which leads to a denial of service (DoS) condition. This attack… | ||||
| CVE-2019-8262US | critical9.8 | — | ||
UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execution. This attack appears to be exploit… | ||||
| CVE-2019-8261US | critical9.8 | — | ||
UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multiplication overflow. This attack appears to be exploitable via… | ||||
| CVE-2019-8260US | critical9.8 | — | ||
UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication overflow. This attack appears to be exploitable via network c… | ||||
| CVE-2019-8259US | high7.5 | — | ||
UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combi… | ||||
references
External citations — patches, advisories, analysis.
remediations (80)
- MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC WinCC Runtime Advanced
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC WinCC Runtime Advanced
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC WinCC Runtime Advanced
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC WinCC Runtime Advanced
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC WinCC Runtime Advanced
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC WinCC Runtime Advanced
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC WinCC Runtime Advanced
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC WinCC Runtime Advanced
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC WinCC Runtime Advanced
Restrict access to port 5900/tcp to trusted IP addresses only
- MitigationSIMATIC WinCC Runtime Advanced
Restrict access to port 5900/tcp to trusted IP addresses only
- FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
Update SIMATIC WinCC (TIA Portal) to V16 Update 4 or later version, and then update panel to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/ - FixedSIMATIC WinCC Runtime Advanced
Update to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776018/ - FixedSIMATIC WinCC Runtime Advanced
Update to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776018/ - FixedSIMATIC WinCC Runtime Advanced
Update to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776018/ - FixedSIMATIC WinCC Runtime Advanced
Update to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776018/ - FixedSIMATIC WinCC Runtime Advanced
Update to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776018/ - FixedSIMATIC WinCC Runtime Advanced
Update to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776018/ - FixedSIMATIC WinCC Runtime Advanced
Update to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776018/ - FixedSIMATIC WinCC Runtime Advanced
Update to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776018/ - FixedSIMATIC WinCC Runtime Advanced
Update to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776018/ - FixedSIMATIC WinCC Runtime Advanced
Update to V16 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776018/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan