CVE:CVE-2021-27384
CNNVD:CNNVD-202105-548
Siemens SIMATIC WinCC是德国西门子（Siemens）公司的一套自动化的数据采集与监控（SCADA）系统。
SIMATIC WinCC存在安全漏洞。该漏洞源于程序存在一个超出范围的内存访问漏洞，该漏洞由客户端的二进制数据流表示，这可能导致代码执行。
solution:Upgrade siemens simatic_wincc_runtime_advanced to a higher version than 16,16,16:update1,16:update2,16:update3,15.1,15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5,and avoid the version (,16),16,16:update1,16:update2,16:update3,(,15.1),15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5; Upgrade siemens sinamics_sh150_firmware to a higher version than *; Upgrade siemens sinamics_sm150i_firmware to a higher version than *; Upgrade siemens sinamics_gh150_firmware to a higher version than *; Upgrade siemens sinamics_gl150_firmware to a higher version than *; Upgrade siemens sinamics_gm150_firmware to a higher version than *; Upgrade siemens sinamics_sl150_firmware to a higher version than *; Upgrade siemens sinamics_sm120_firmware to a higher version than *; Upgrade siemens sinamics_sm150_firmware to a higher version than *; Upgrade siemens simatic_hmi_comfort_outdoor_panels_7"_firmware to a higher version than 16,16,16:update1,16:update2,16:update3,15.1,15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5,and avoid the version (,16),16,16:update1,16:update2,16:update3,(,15.1),15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5; Upgrade siemens simatic_hmi_comfort_outdoor_panels_15"_firmware to a higher version than 16,16,16:update1,16:update2,16:update3,15.1,15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5,and avoid the version (,16),16,16:update1,16:update2,16:update3,(,15.1),15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5; Upgrade siemens simatic_hmi_comfort_panels_4"_firmware to a higher version than 16,16,16:update1,16:update2,16:update3,15.1,15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5,and avoid the version (,16),16,16:update1,16:update2,16:update3,(,15.1),15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5; Upgrade siemens simatic_hmi_comfort_panels_22"_firmware to a higher version than 16,16,16:update1,16:update2,16:update3,15.1,15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5,and avoid the version (,16),16,16:update1,16:update2,16:update3,(,15.1),15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5; Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp400f_firmware to a higher version than 16,16,16:update1,16:update2,16:update3,15.1,15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5,and avoid the version (,16),16,16:update1,16:update2,16:update3,(,15.1),15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5; Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp700_firmware to a higher version than 16,16,16:update1,16:update2,16:update3,15.1,15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5,and avoid the version (,16),16,16:update1,16:update2,16:update3,(,15.1),15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5; Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp700f_firmware to a higher version than 16,16,16:update1,16:update2,16:update3,15.1,15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5,and avoid the version (,16),16,16:update1,16:update2,16:update3,(,15.1),15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5; Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp900_firmware to a higher version than 16,16,16:update1,16:update2,16:update3,15.1,15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5,and avoid the version (,16),16,16:update1,16:update2,16:update3,(,15.1),15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5; Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp900f_firmware to a higher version than 16,16,16:update1,16:update2,16:update3,15.1,15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5,and avoid the version (,16),16,16:update1,16:update2,16:update3,(,15.1),15.1,15.1:update1,15.1:update2,15.1:update3,15.1:update4,15.1:update5