Siemens Products using TightVNC (Update A)
Multiple TightVNC (V1.x) vulnerabilities could allow remote code execution and Denial-of-Service attacks under certain conditions. Siemens has previously released this advisory containing a set of products that were considered to be affected. Through Siemens' continuous investigation processes it was identified that all products previously advised are not affected by any vulnerability listed in this advisory.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-8287US | critical9.8 | — | ||
TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via… | ||||
| CVE-2019-15680US | high7.5 | — | ||
TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network con… | ||||
| CVE-2019-15679US | critical9.8 | — | ||
TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear to be exploitable vi… | ||||
| CVE-2019-15678US | critical9.8 | — | ||
TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This attack appear to be exploitable via netwo… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-478893: TightVNC Vulnerabilities in Industrial Products (Revoked) - CSAF Versionself
- SSA-478893: TightVNC Vulnerabilities in Industrial Products (Revoked) - PDF Versionself
- SSA-478893: TightVNC Vulnerabilities in Industrial Products (Revoked) - TXT Versionself
- ICS Advisory ICSA-20-343-08 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-343-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (44)
- BehobenSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1500 V3.1
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1500 V3.1
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1500 V3.1
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1500 V3.1
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1500 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1500 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1500 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1500 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1900 V3.1
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1900 V3.1
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1900 V3.1
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1900 V3.1
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1900 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1900 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1900 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC1900 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC2200 V3.1
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC2200 V3.1
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC2200 V3.1
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC2200 V3.1
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC2200 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC2200 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC2200 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC ITC2200 V3.1 PRO
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC WinCC Runtime Advanced
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC WinCC Runtime Advanced
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC WinCC Runtime Advanced
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC WinCC Runtime Advanced
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC WinCC Runtime Professional
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC WinCC Runtime Professional
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC WinCC Runtime Professional
This product is not affected by any vulnerability listed in this advisory
- BehobenSIMATIC WinCC Runtime Professional
This product is not affected by any vulnerability listed in this advisory
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan