Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update D)

🗓️ 14 Apr 2020 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 65 Views

As of 10th Jan 2023, CISA will stop updating Siemens ICS security advisories beyond initial advisory. Siemens products affected are KTK, SIDOOR, SIMATIC, and SINAMICS. Exploitable remotely with low skill level to exploit. Vulnerability: Uncontrolled Resource Consumption

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2019-19300	15 Apr 202000:44	–	circl
CNVD	Multiple Siemens Products Resource Management Error Vulnerability (CNVD-2020-23035)	15 Apr 202000:00	–	cnvd
CVE	CVE-2019-19300	14 Apr 202000:00	–	cve
Cvelist	CVE-2019-19300	14 Apr 202000:00	–	cvelist
EUVD	EUVD-2019-8924	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Siemens products	10 Jan 202300:00	–	ncsc
NVD	CVE-2019-19300	14 Apr 202020:15	–	nvd
OSV	CVE-2019-19300	14 Apr 202020:15	–	osv
Tenable Nessus	Siemens Ktk Uncontrolled Resource Consumption	27 May 202000:00	–	nessus
Tenable Nessus	Siemens KTK, SIDOOR, SIMATIC, and SINAMICS Uncontrolled Resource Consumption (CVE-2019-19300)	7 Feb 202200:00	–	nessus

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-593272.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-593272.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2020/icsa-20-105-08.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-20-105-08
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

14 Apr 2020 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 25

CVSS 3.17.5

EPSS0.00536