Lucene search
+L

CVE-2019-10929

🗓️ 13 Aug 2019 18:55:57Reported by siemensType 
cve
 cve
🔗 web.nvd.nist.gov👁 120 Views

Vulnerability in SIMATIC CP 1626, ET 200SP Open Controller, HMI Panel, S7-1200 & S7-1500 CPU families, WinCC, STEP 7 (TIA Portal), S7-PLCSIM Advanced, and TIM 1531 IRC allows message protection bypass leading to network traffic modification

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
cnvd
CNVD
SIMATICS7-1200 and SIMATICS7-1500CPU families Man-in-the-Middle Attack Vulnerability
14 Aug 201900:00
–cnvd
cvelist
Cvelist
CVE-2019-10929
13 Aug 201918:55
–cvelist
euvd
EUVD
EUVD-2019-2643
7 Oct 202500:30
–euvd
ics
ICS
Siemens SIMATIC Products (Update C)
10 Dec 201900:00
–ics
ics
ICS
Siemens SIMATIC S7-1200 and S7-1500 CPU Families (Update B)
10 Dec 201900:00
–ics
nvd
NVD
CVE-2019-10929
13 Aug 201919:15
–nvd
osv_cve
osv_cve
CVE-2019-10929
13 Aug 201919:15
–osv_cve
nessus
Tenable Nessus
Siemens Simatic Improper Access Control
8 Nov 201900:00
–nessus
nessus
Tenable Nessus
Siemens SIMATIC Products Use of a Broken or Risky Cryptographic Algorithm (CVE-2019-10929)
7 Feb 202200:00
–nessus
prion
Prion
Design/Logic Flaw
13 Aug 201919:15
–prion
Rows per page
NVD
Vulners
[
  {
    "product": "SIMATIC CP 1626",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V20.8"
      }
    ]
  },
  {
    "product": "SIMATIC HMI Panel (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC NET PC Software V14",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V14 SP1 Update 14"
      }
    ]
  },
  {
    "product": "SIMATIC NET PC Software V15",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC S7-1200 CPU family (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.4.0"
      }
    ]
  },
  {
    "product": "SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.8.1"
      }
    ]
  },
  {
    "product": "SIMATIC S7-1500 Software Controller",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V20.8"
      }
    ]
  },
  {
    "product": "SIMATIC S7-PLCSIM Advanced",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0"
      }
    ]
  },
  {
    "product": "SIMATIC STEP 7 (TIA Portal)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V16"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC (TIA Portal)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V16"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC OA",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.16 P013"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC Runtime Advanced",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V16"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC Runtime Professional",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V16"
      }
    ]
  },
  {
    "product": "TIM 1531 IRC (incl. SIPLUS NET variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.1"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 02:11Current
5.5Medium risk
Vulners AI Score5.5
CVSS 24.3
CVSS 3.15.9
EPSS0.00978
120