ICSA-19-134-02 Siemens SIMATIC WinCC and SIMATIC PCS 7

🗓️ 14 May 2019 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 32 Views

Siemens SIMATIC WinCC and SIMATIC PCS 7 are vulnerable to remote exploitation due to missing authentication for critical function, allowing arbitrary code execution. Critical infrastructure sectors affected include Chemical, Energy, Food, and Agriculture

Reporter	Title	Published	Views	Family All 10
Tenable Nessus	Siemens SIMATIC PCS 7 <= V8.0 RCE (ICSA-19-134-02-0)	7 Jun 201900:00	–	nessus
BDU FSTEC	The vulnerability of Siemens SIMATIC process control systems, related to errors in network access restrictions, allows a intruder to execute arbitrary code.	31 May 201900:00	–	bdu_fstec
CVE	CVE-2019-10922	14 May 201919:54	–	cve
Cvelist	CVE-2019-10922	14 May 201919:54	–	cvelist
EUVD	EUVD-2019-2636	7 Oct 202500:30	–	euvd
ICS	Siemens SIMATIC WinCC and SIMATIC PCS 7	14 May 201900:00	–	ics
NVD	CVE-2019-10922	14 May 201920:29	–	nvd
OSV	CVE-2019-10922	14 May 201920:29	–	osv
Prion	Security feature bypass	14 May 201920:29	–	prion
RedhatCVE	CVE-2019-10922	22 May 202510:25	–	redhatcve

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-705517.txt
raw	www.raw.githubusercontent.com/cisagov/CSAF/refs/heads/develop/csaf_files/OT/white/2019/icsa-19-134-02.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-19-134-02
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

14 May 2019 00:00Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 3.19.8

EPSS0.01264