Siemens SIMATIC HMI Panels vulnerabilities

12 CVEs affecting Siemens SIMATIC HMI Panels, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-4879, published 2012-02-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-4875, published 2012-02-03. High severity, CVSS 9.3. EPSS: 13.8% chance of exploitation in the next 30 days. Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels…
CVE-2011-4879, published 2012-02-03. High severity, CVSS 8.5. EPSS: 12.1% chance of exploitation in the next 30 days. miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels…
CVE-2011-4878, published 2012-02-03. High severity, CVSS 7.8. EPSS: 11.1% chance of exploitation in the next 30 days. Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP,…
CVE-2011-4876, published 2012-02-03. High severity, CVSS 9.3. EPSS: 9% chance of exploitation in the next 30 days. Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels…
CVE-2011-4877, published 2012-02-03. High severity, CVSS 7.1. EPSS: 7.3% chance of exploitation in the next 30 days. HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime…
CVE-2011-4513, published 2012-02-03. High severity, CVSS 10.0. EPSS: 4.8% chance of exploitation in the next 30 days. Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible…
CVE-2011-4514, published 2012-02-03. High severity, CVSS 10.0. EPSS: 3.4% chance of exploitation in the next 30 days. The TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced;…
CVE-2011-4508, published 2012-02-03. High severity, CVSS 9.3. EPSS: 3% chance of exploitation in the next 30 days. The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI…
CVE-2011-4509, published 2012-02-03. High severity, CVSS 10.0. EPSS: 2% chance of exploitation in the next 30 days. The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced;…
CVE-2011-4512, published 2012-02-03. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. CRLF injection vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and…

Latest

CVE-2011-4511, published 2012-02-03. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort…
CVE-2011-4510, published 2012-02-03. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort…