[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fM9nDteggObRCWLUrGbbsginACLRZRODVmvLtx7inzTs":3,"g5a-ex:siemens\u002Fsimatic_hmi_comfort_panels@*":104,"g5a-family:siemens\u002Fsimatic_hmi_comfort_panels":106},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":81,"seoMetadata":82,"meta":101},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"siemens","simatic_hmi_comfort_panels",1,15,0,"2022-10-11",[14],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"15.1",false,"Simatic Hmi Comfort Panels by Siemens is a technology product with 1 tracked version and 15 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},[21,29,37,43,51,55,60,65,70,75],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":28},"CVE-2020-15798","A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions \u003C V16 Update 3a), SIMATIC HMI KTP Mobile Panels (All versions \u003C V16 Update 3a), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). Affected devices with enabled telnet service do not require authentication for this service. This could allow a remote attacker to gain full access to the device. (ZDI-CAN-12046)","2021-02-09",9.8,"v3.1","Critical",0.05218,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":16,"epssScore":36},"CVE-2018-13812","A vulnerability has been identified in SIMATIC HMI Comfort Panels 4\" - 22\" (All versions \u003C V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (All versions \u003C V15 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions \u003C V15 Update 4), SIMATIC WinCC Runtime Advanced (All versions \u003C V15 Update 4), SIMATIC WinCC Runtime Professional (All versions \u003C V15 Update 4), SIMATIC WinCC (TIA Portal) (All versions \u003C V15 Update 4), SIMATIC HMI Classic Devices (TP\u002FMP\u002FOP\u002FMP Mobile Panel) (All versions). A directory traversal vulnerability could allow to download arbitrary files from the device. The security vulnerability could be exploited by an attacker with network access to the integrated web server. No user interaction and no authentication is required to exploit the vulnerability. The vulnerability impacts the confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.","2018-12-13",7.5,"v3.0","High",0.03572,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":42},"CVE-2019-6572","A vulnerability has been identified in SIMATIC HMI Comfort Panels 4\" - 22\" (All versions \u003C V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (All versions \u003C V15.1 Update 1), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F (All versions \u003C V15.1 Update 1), SIMATIC WinCC Runtime Advanced (All versions \u003C V15.1 Update 1), SIMATIC WinCC Runtime Professional (All versions \u003C V15.1 Update 1), SIMATIC WinCC (TIA Portal) (All versions \u003C V15.1 Update 1), SIMATIC HMI Classic Devices (TP\u002FMP\u002FOP\u002FMP Mobile Panel) (All versions). The affected device offered SNMP read and write capacities with a publicly know hardcoded community string. The security vulnerability could be exploited by an attacker with network access to the affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.","2019-05-14",9.1,0.02721,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":48,"severity":49,"isKev":16,"epssScore":50},"CVE-2015-2823","Siemens SIMATIC HMI Basic Panels 2nd Generation before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Advanced before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Professional before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Basic Panels 1st Generation (WinCC TIA Portal), SIMATIC HMI Mobile Panel 277 (WinCC TIA Portal), SIMATIC HMI Multi Panels (WinCC TIA Portal), and SIMATIC WinCC 7.x before 7.3 Upd4 allow remote attackers to complete authentication by leveraging knowledge of a password hash without knowledge of the associated password.","2015-04-08",6.8,"v2","Medium",0.02134,{"cveId":52,"description":53,"publishedDate":40,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":16,"epssScore":54},"CVE-2019-6576","A vulnerability has been identified in SIMATIC HMI Comfort Panels 4\" - 22\" (All versions \u003C V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (All versions \u003C V15.1 Update 1), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F (All versions \u003C V15.1 Update 1), SIMATIC WinCC Runtime Advanced (All versions \u003C V15.1 Update 1), SIMATIC WinCC Runtime Professional (All versions \u003C V15.1 Update 1), SIMATIC WinCC (TIA Portal) (All versions \u003C V15.1 Update 1), SIMATIC HMI Classic Devices (TP\u002FMP\u002FOP\u002FMP Mobile Panel) (All versions). An attacker with network access to affected devices could potentially obtain a TLS session key. If the attacker is able to observe TLS traffic between a legitimate user and the device, then the attacker could decrypt the TLS traffic. The security vulnerability could be exploited by an attacker who has network access to the web interface of the device and who is able to observe TLS traffic between legitimate users and the web interface of the affected device. The vulnerability could impact the confidentiality of the communication between the affected device and a legitimate user. At the time of advisory publication no public exploitation of the security vulnerability was known.",0.01749,{"cveId":56,"description":57,"publishedDate":32,"cvssScore":58,"cvssVersion":34,"severity":35,"isKev":16,"epssScore":59},"CVE-2018-13814","A vulnerability has been identified in SIMATIC HMI Comfort Panels 4\" - 22\" (All versions \u003C V14), SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (All versions \u003C V14), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions \u003C V14), SIMATIC WinCC Runtime Advanced (All versions \u003C V14), SIMATIC WinCC Runtime Professional (All versions \u003C V14), SIMATIC WinCC (TIA Portal) (All versions \u003C V14), SIMATIC HMI Classic Devices (TP\u002FMP\u002FOP\u002FMP Mobile Panel) (All versions). The integrated web server (port 80\u002Ftcp and port 443\u002Ftcp) of the affected devices could allow an attacker to inject HTTP headers. An attacker must trick a valid user who is authenticated to the device into clicking on a malicious link to exploit the vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.",8.8,0.01684,{"cveId":61,"description":62,"publishedDate":32,"cvssScore":63,"cvssVersion":34,"severity":35,"isKev":16,"epssScore":64},"CVE-2018-13813","A vulnerability has been identified in SIMATIC HMI Comfort Panels 4\" - 22\" (All versions \u003C V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (All versions \u003C V15 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions \u003C V15 Update 4), SIMATIC WinCC Runtime Advanced (All versions \u003C V15 Update 4), SIMATIC WinCC Runtime Professional (All versions \u003C V15 Update 4), SIMATIC WinCC (TIA Portal) (All versions \u003C V15 Update 4), SIMATIC HMI Classic Devices (TP\u002FMP\u002FOP\u002FMP Mobile Panel) (All versions). The webserver of affected HMI devices may allow URL redirections to untrusted websites. An attacker must trick a valid user who is authenticated to the device into clicking on a malicious link to exploit the vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.",8.1,0.01681,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":69},"CVE-2020-15786","A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions \u003C V16), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions \u003C= V16), SIMATIC HMI Mobile Panels (All versions \u003C= V16), SIMATIC HMI Unified Comfort Panels (All versions \u003C= V16). Affected devices insufficiently block excessive authentication attempts. This could allow a remote attacker to discover user passwords and obtain access to the Sm@rt Server via a brute-force attack.","2020-09-09",0.01489,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":33,"cvssVersion":26,"severity":35,"isKev":16,"epssScore":74},"CVE-2019-6568","The webserver of the affected devices contains a vulnerability that may lead to\r\na denial of service condition. An attacker may cause a denial of service\r\nsituation which leads to a restart of the webserver of the affected device.\r\n\r\nThe security vulnerability could be exploited by an attacker with network\r\naccess to the affected systems. Successful exploitation requires no system\r\nprivileges and no user interaction. An attacker could use the vulnerability\r\nto compromise availability of the device.","2019-04-17",0.01401,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":26,"severity":49,"isKev":16,"epssScore":80},"CVE-2017-2680","Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.","2017-05-11",6.5,0.01149,[],{"title":83,"metaDescription":84,"keywords":85,"structuredData":86},"Simatic Hmi Comfort Panels by Siemens - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Simatic Hmi Comfort Panels by Siemens covering 1 version with 15 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Simatic Hmi Comfort Panels vulnerabilities, Simatic Hmi Comfort Panels security, Simatic Hmi Comfort Panels CVE, Siemens Simatic Hmi Comfort Panels, Simatic Hmi Comfort Panels threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":87,"@type":88,"name":89,"description":84,"url":90,"manufacturer":91,"applicationCategory":95,"softwareVersion":96,"mainEntity":97},"https:\u002F\u002Fschema.org","SoftwareApplication","Simatic Hmi Comfort Panels","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Fsimatic_hmi_comfort_panels",{"@type":92,"name":93,"url":94},"Organization","Siemens","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsiemens","Security Software","1 versions tracked",{"@type":98,"name":99,"description":100,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Simatic Hmi Comfort Panels Security Vulnerabilities","Security vulnerabilities affecting Simatic Hmi Comfort Panels by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":102,"apiVersion":103},"2026-10-19T02:34:20.751Z","3.0",{"rows":105,"total":11,"capped":16,"failed":11},[],[107,110,113,115,117],{"product":108,"cves":109},"simatic_hmi_comfort_panels_firmware",12,{"product":111,"cves":112},"simatic_hmi_comfort_panels_22\\\"",8,{"product":114,"cves":112},"simatic_hmi_comfort_panels_22\\\"_firmware",{"product":116,"cves":112},"simatic_hmi_comfort_panels_4\\\"",{"product":118,"cves":112},"simatic_hmi_comfort_panels_4\\\"_firmware"]