Lucene search
K

EUVD-2019-2643

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 2 Views

Vulnerability in multiple SIMATIC devices allows Man-in-the-Middle attacks to modify network traffic.

Related
Affected
Refs
[
  {
    "enisaIdVendor": [
      {
        "id": "d12bdc78-fadb-33cf-8048-d0c161753962",
        "vendor": {
          "name": "Siemens"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "226f961b-bc8d-3210-a1bf-69cfeb6a6a39",
        "product": {
          "name": "SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)"
        },
        "product_version": "All versions"
      },
      {
        "id": "2bbe5d18-1b48-30d2-9dd3-3a4ad3dfa899",
        "product": {
          "name": "SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)"
        },
        "product_version": "All versions < V20.8"
      },
      {
        "id": "4743e359-7d0a-35d4-be8a-e926b3767094",
        "product": {
          "name": "SIMATIC NET PC Software V15"
        },
        "product_version": "All versions"
      },
      {
        "id": "5102b727-66d9-3be0-9fdf-85d8c17fa588",
        "product": {
          "name": "SIMATIC WinCC Runtime Advanced"
        },
        "product_version": "All versions < V16"
      },
      {
        "id": "5845d8c0-99b1-3934-bd38-7188ba9e49b6",
        "product": {
          "name": "SIMATIC HMI Panel (incl. SIPLUS variants)"
        },
        "product_version": "All versions"
      },
      {
        "id": "628e5dff-ed4d-33cc-89f4-17cd4f1a7f7b",
        "product": {
          "name": "SIMATIC S7-1500 Software Controller"
        },
        "product_version": "All versions < V20.8"
      },
      {
        "id": "6ed839d3-b70c-314c-a909-ae0ccccbfff6",
        "product": {
          "name": "SIMATIC STEP 7 (TIA Portal)"
        },
        "product_version": "All versions < V16"
      },
      {
        "id": "75470708-5edb-3279-8d42-8c25199d244e",
        "product": {
          "name": "SIMATIC CP 1626"
        },
        "product_version": "All versions"
      },
      {
        "id": "7991962a-44bd-3b5e-8d35-bb061831b389",
        "product": {
          "name": "SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)"
        },
        "product_version": "All versions < V2.8.1"
      },
      {
        "id": "9a792580-819d-3929-97ee-1cd026dcd6af",
        "product": {
          "name": "SIMATIC WinCC OA"
        },
        "product_version": "All versions < V3.16 P013"
      },
      {
        "id": "ba916e2a-a4bf-3c93-a62b-24eda7a2f01d",
        "product": {
          "name": "SIMATIC S7-PLCSIM Advanced"
        },
        "product_version": "All versions < V3.0"
      },
      {
        "id": "ca847fb1-5ad2-3900-afee-77a71b315417",
        "product": {
          "name": "SIMATIC S7-1200 CPU family (incl. SIPLUS variants)"
        },
        "product_version": "All versions < V4.4.0"
      },
      {
        "id": "ce2a35a5-92de-3b4b-bed0-1351abcba059",
        "product": {
          "name": "SIMATIC WinCC Runtime Professional"
        },
        "product_version": "All versions < V16"
      },
      {
        "id": "e5665cf5-4c69-3b6b-9d65-dd24e8a4eda8",
        "product": {
          "name": "TIM 1531 IRC (incl. SIPLUS NET variants)"
        },
        "product_version": "All versions < V2.1"
      },
      {
        "id": "ea24c3a0-4ca0-3693-b63a-c09fce3c78dc",
        "product": {
          "name": "SIMATIC WinCC (TIA Portal)"
        },
        "product_version": "All versions < V16"
      },
      {
        "id": "f27e1989-3f49-3803-94fb-4e79bc6f313b",
        "product": {
          "name": "SIMATIC NET PC Software V14"
        },
        "product_version": "All versions < V14 SP1 Update 14"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 Oct 2025 00:30Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.15.9
CVSS 24.3
EPSS0.00139
2