Lucene search
K

CVE-2019-10935

🗓️ 11 Jul 2019 21:17:47Reported by siemensType 
cve
 cve
🔗 web.nvd.nist.gov👁 288 Views

Vulnerability in SIMATIC PCS 7 & WinCC allows arbitrary ASPX code upload

Related
Detection
Affected
Refs
NVD
Node
OROR
siemenssimatic_winccMatch7.3update_1
OR
siemenssimatic_winccMatch7.3update_10
OR
siemenssimatic_winccMatch7.3update_11
OR
siemenssimatic_winccMatch7.3update_13
OR
siemenssimatic_winccMatch7.3update_4
OROROR
siemenssimatic_winccMatch7.4update_1
OR
Node
siemenssimatic_winccMatch13-professional
OR
siemenssimatic_winccMatch13sp2professional
OR
siemenssimatic_winccMatch14professional
OR
siemenssimatic_winccMatch14-professional
OR
siemenssimatic_winccMatch14sp1professional
OR
siemenssimatic_winccMatch15professional
Node
siemenssimatic_wincc_runtimeMatch13professional
OR
siemenssimatic_wincc_runtimeMatch13-professional
OR
siemenssimatic_wincc_runtimeMatch13sp1update_2professional
OR
siemenssimatic_wincc_runtimeMatch13sp1update_9professional
OR
siemenssimatic_wincc_runtimeMatch13sp2professional
OR
siemenssimatic_wincc_runtimeMatch14-professional
OR
siemenssimatic_wincc_runtimeMatch14sp1professional
OR
siemenssimatic_wincc_runtimeMatch15-professional
OR
siemenssimatic_wincc_runtimeMatch15update_4professional
OR
siemenssimatic_wincc_runtimeMatch15.1-professional
OR
siemenssimatic_wincc_runtimeMatch15.1update_1professional
[
  {
    "product": "SIMATIC PCS 7 V8.0 and earlier",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC PCS 7 V8.1",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V8.1 with WinCC V7.3 Upd 19"
      }
    ]
  },
  {
    "product": "SIMATIC PCS 7 V8.2",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd 11"
      }
    ]
  },
  {
    "product": "SIMATIC PCS 7 V9.0",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V9.0 SP2 with WinCC V7.4 SP1 Upd11"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC Professional (TIA Portal V13)",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC Professional (TIA Portal V14)",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V14 SP1 Upd 9"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC Professional (TIA Portal V15)",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V15.1 Upd 3"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC Runtime Professional V13",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC Runtime Professional V14",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V14.1 Upd 8"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC Runtime Professional V15",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V15.1 Upd 3"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC V7.2 and earlier",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC V7.3",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V7.3 Upd 19"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC V7.4",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V7.4 SP1 Upd 11"
      }
    ]
  },
  {
    "product": "SIMATIC WinCC V7.5",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V7.5 Upd 3"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 04:20Current
6.7Medium risk
Vulners AI Score6.7
CVSS 26.5
CVSS 37.2
EPSS0.00517
288