CVE-2019-10939

🗓️ 14 Apr 2020 19:50:54Reported by siemensType

A vulnerability in TIM 3V-IE & TIM 4R-IE (incl. SIPLUS NET variants) exposes debug port

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2019-10939	15 Apr 202001:14	–	circl
Cvelist	CVE-2019-10939	14 Apr 202019:50	–	cvelist
EUVD	EUVD-2019-2653	7 Oct 202500:30	–	euvd
ICS	Siemens TIM 3V-IE and 4R-IE Family Devices	14 Apr 202000:00	–	ics
NVD	CVE-2019-10939	14 Apr 202020:15	–	nvd
Prion	Design/Logic Flaw	14 Apr 202020:15	–	prion
RedhatCVE	CVE-2019-10939	22 May 202509:15	–	redhatcve

NVD

Node

siemens tim_3v-ie_firmwareRange<2.8

AND

siemens tim_3v-ieMatch-

Node

siemens tim_3v-ie_advanced_firmwareRange<2.8

AND

siemens tim_3v-ie_advancedMatch-

Node

siemens tim_4r-ie_firmwareRange<3.3

AND

siemens tim_4r-ieMatch-

Node

siemens tim_3v-ie_dnp3_firmwareRange<2.8

AND

siemens tim_3v-ie_dnp3Match-

Node

siemens tim_4r-ie_dnp3_firmwareRange<3.3

AND

siemens tim_4r-ie_dnp3Match-

[
  {
    "product": "TIM 3V-IE (incl. SIPLUS NET variants)",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.8"
      }
    ]
  },
  {
    "product": "TIM 3V-IE Advanced (incl. SIPLUS NET variants)",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.8"
      }
    ]
  },
  {
    "product": "TIM 3V-IE DNP3 (incl. SIPLUS NET variants)",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.3"
      }
    ]
  },
  {
    "product": "TIM 4R-IE (incl. SIPLUS NET variants)",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.8"
      }
    ]
  },
  {
    "product": "TIM 4R-IE DNP3 (incl. SIPLUS NET variants)",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.3"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-359303.pdf

21 Nov 2024 04:20Current

8.9High risk

Vulners AI Score8.9

CVSS 26.8

CVSS 3.19.8

EPSS0.00444

CWE-489