CVE-2019-10938

🗓️ 02 Aug 2019 13:54:07Reported by siemensType

A vulnerability in SIPROTEC 5 and Siemens Power Meters allows unauthenticated attacker to insert and execute arbitrary code before firmware verification

Reporter	Title	Published	Views	Family All 8
CNVD	Siemens SIPROTEC 5 Access Privilege Vulnerability	5 Aug 201900:00	–	cnvd
Cvelist	CVE-2019-10938	2 Aug 201913:54	–	cvelist
EUVD	EUVD-2019-2652	7 Oct 202500:30	–	euvd
NVD	CVE-2019-10938	2 Aug 201914:15	–	nvd
Tenable Nessus	Siemens Siprotec Improper Access Control	8 Nov 201900:00	–	nessus
Tenable Nessus	Siemens Siprotec5 Improper Access Control (CVE-2019-10938)	7 Feb 202200:00	–	nessus
Prion	Code injection	2 Aug 201914:15	–	prion
RedhatCVE	CVE-2019-10938	22 May 202504:17	–	redhatcve

NVD

Node

siemens siprotec_5_digsi_device_driver

AND

siemens 6md85Match-

siemens 6md86Match-

siemens 6md89Match-

siemens 7sa82Match-

siemens 7sa86Match-

siemens 7sa87Match-

siemens 7sd82Match-

siemens 7sd86Match-

siemens 7sd87Match-

siemens 7sj82Match-

siemens 7sj85Match-

siemens 7sj86Match-

siemens 7sk82Match-

siemens 7sk85Match-

siemens 7sl82Match-

siemens 7sl86Match-

siemens 7sl87Match-

siemens 7um85Match-

siemens 7ut82Match-

siemens 7ut85Match-

siemens 7ut86Match-

siemens 7ut87Match-

siemens 7ve85Match-

siemens 7vk87Match-

[
  {
    "product": "SIPROTEC 5 devices with CPU variants CP200",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V7.59"
      }
    ]
  },
  {
    "product": "SIPROTEC 5 devices with CPU variants CP300 and CP100",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V8.01"
      }
    ]
  },
  {
    "product": "Siemens Power Meters Series 9410",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.2.1"
      }
    ]
  },
  {
    "product": "Siemens Power Meters Series 9810",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf

17 Jun 2026 02:11Current

9.1High risk

Vulners AI Score9.1

CVSS 27.5

CVSS 3.19.8

EPSS0.01495

CWE-284