VDB
CNVD-2021-54366
CNVD-2021-54366
PUBLISHED
Siemens SIMATIC WinCC等都是德国西门子（Siemens）公司的产品。SIMATIC WinCC是一套自动化的数据采集与监控（SCADA）系统。Siemens SIMATIC HMI Comfort Panels是一款触摸面板设备。Siemens SIMATIC HMI Comfort Outdoor Panels是一款专用于户外的触摸面板设备。 多款Siemens产品中存在安全漏洞。攻击者可利用该漏洞获取TLS会话密钥并解密TLS流量，进而影响设备与合法用户之间的通信的保密性。
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens SIMATIC WinCC (TIA Portal) < V15.1 Update 1 | ||
| Siemens SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants) < V15.1 Update 1 | ||
| Siemens SIMATIC HMI Classic Devices - TP/MP/OP/MP Mobile Panel (incl. SIPLUS variants) | ||
| Siemens SIMATIC HMI KTP Mobile Panels KTP400F，KTP700，KTP700F，KTP900 and KTP900F < V15.1 Update 1 | ||
| Siemens SIMATIC WinCC Runtime Professional < V15.1 Update 1 | ||
| Siemens SIMATIC WinCC Runtime Advanced < V15.1 Update 1 | ||
| Siemens SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants) < V15.1 Update 1 |
Timeline
- May 14, 2019 CVE ID Reserved
- Jul 24, 2021 CVE Published