CVE-2019-10925

CVE-2019-10925 affects Siemens SIMATIC MV440 (and MV400 family) with all versions prior to v7.0.6. The root cause is improper privilege management (CWE-269) in the device’s integrated webserver, allowing an authenticated attacker with network access and valid credentials to escalate privileges vi...

Siemens SIMATIC Ident MV440 Family (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC Ident MV440 Familiy Vulnerabilities: Improper Privilege Management, Cleartext Transmission of Sensitive Information 2. UPDATE INFORMATION This updated advisory is a...