VYPR
← All advisories
Medium severity5.3NVD Advisory· Published May 12, 2021· Updated Jun 17, 2026

CVE-2019-19276

CVE-2019-19276

Description

A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 4). Specially crafted packets sent to port 161/udp can cause the SNMP service of affected devices to crash. A manual restart of the device is required to resume operation of the service.

Affected products

10
  • Siemens Foundation/Simatic Hmi Comfort Panels4 versions
    cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:16:-:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:16:-:*:*:*:*:*:*
    • cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:16:update_2:*:*:*:*:*:*
    • cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:16:update_3:*:*:*:*:*:*
    • (no CPE)range: < V16 Update 4
  • Siemens Foundation/SIMATIC HMI KTP Mobile Panels4 versions
    cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_firmware:16:-:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_firmware:16:-:*:*:*:*:*:*
    • cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_firmware:16:update_2:*:*:*:*:*:*
    • cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_firmware:16:update_3:*:*:*:*:*:*
    • (no CPE)range: < V16 Update 4
  • Siemens Foundation/SIMATIC HMI Comfort Panels 1st Generationcpe-rescue
    Range: All versions < V16 Update 4
  • Siemens Foundation/Simatic Hmi Panelscpe-rescue
    Range: All versions < V16 Update 4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.