SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) vulnerabilities
4 known vulnerabilities in SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) from Siemens. 4 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.1 Critical severity
Industrial Edge Device Kit - arm64 V1.10: Path Traversal: '.../...//'
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthoriz
- 7.7 High severity
SIMATIC HMI MTP1000 Unified Comfort Panel: Initialization of a Resource with an Insecure Default
Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling
- 7.8 High severity
Linux Kernel Incorrect Resource Transfer Between Spheres Exploited
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_
- 10.0 Critical severity
Industrial Edge Cloud Device (IECD): Authorization Bypass Through User-Controlled Key
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker