CVE-2019-6576 Weak cryptography in SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel)

Q: Is CVE-2019-6576 being exploited?

There is no known exploitation of CVE-2019-6576 in the wild and no public exploit code.

Q: How do I fix CVE-2019-6576?

No fix has been published for CVE-2019-6576 yet. Limit exposure of the affected software until one is available.

Medium 6.5 Published 14 May 2019 Updated 2 Jun 2026

An attacker with network access can obtain TLS session keys to decrypt traffic, compromising communication confidentiality in Siemens HMI devices.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-6576?

CVE-2019-6576 is a medium-severity vulnerability in Siemens AG SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel), published on 14 May 2019. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15.1 Update 1), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Advanced (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Professional (All versions < V15.1 Update 1), SIMATIC WinCC (TIA Portal) (All versions < V15.1 Update 1), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). An attacker with network access to affected devices could potentially obtain a TLS session key. If the attacker is able to observe TLS traffic between a legitimate user and the device, then the attacker could decrypt the TLS traffic. The security vulnerability could be exploited by an attacker who has network access to the web interface of the device and who is able to observe TLS traffic between legitimate users and the web interface of the affected device. The vulnerability could impact the confidentiality of the communication between the affected device and a legitimate user. At the time of advisory publication no public exploitation of the security vulnerability was known.

Weakness: CWE-310

Which versions are affected by CVE-2019-6576?

It affects 12 products.

Products include Siemens Simatic Hmi Comfort Outdoor Panels Firmware, Siemens Simatic Hmi Comfort Panels Firmware, Siemens Simatic Hmi Ktp Mobile Panels Ktp400f Firmware, Siemens Simatic Hmi Ktp Mobile Panels Ktp700 Firmware, Siemens Simatic Hmi Ktp Mobile Panels Ktp700f Firmware, Siemens Simatic Hmi Ktp Mobile Panels Ktp900 Firmware and 6 more.

How do I fix CVE-2019-6576?

No fix has been published for CVE-2019-6576 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-6576 being exploited?

There is no known exploitation of CVE-2019-6576 in the wild and no public exploit code.

Sources

Also known as GHSA-6vg7-p7hj-4575.