Lucene search
K

CVE-2019-10929

🗓️ 13 Aug 2019 18:55:57Reported by siemensType 
cve
 cve
🔗 web.nvd.nist.gov👁 79 Views

Vulnerability in SIMATIC CP 1626, ET 200SP Open Controller, HMI Panel, S7-1200 & S7-1500 CPU families, WinCC, STEP 7 (TIA Portal), S7-PLCSIM Advanced, and TIM 1531 IRC allows message protection bypass leading to network traffic modification

Related
Detection
Affected
Refs
NVD
[
  {
    "product": "SIMATIC CP 1626",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V20.8"
      }
    ]
  },
  {
    "product": "SIMATIC HMI Panel (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC NET PC Software V14",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V14 SP1 Update 14"
      }
    ]
  },
  {
    "product": "SIMATIC NET PC Software V15",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC S7-1200 CPU family (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.4.0"
      }
    ]
  },
  {
    "product": "SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.8.1"
      }
    ]
  },
  {
    "product": "SIMATIC S7-1500 Software Controller",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V20.8"
      }
    ]
  },
  {
    "product": "SIMATIC S7-PLCSIM Advanced",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0"
      }
    ]
  },
  {
    "product": "SIMATIC STEP 7 (TIA Portal)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V16"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC (TIA Portal)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V16"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC OA",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.16 P013"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC Runtime Advanced",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V16"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC Runtime Professional",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V16"
      }
    ]
  },
  {
    "product": "TIM 1531 IRC (incl. SIPLUS NET variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.1"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 04:20Current
5.5Medium risk
Vulners AI Score5.5
CVSS 24.3
CVSS 3.15.9
EPSS0.00139
79