CVEvulnerability

CVE-2019-6568

7.5 HIGH Published 2019-04-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-04-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-125

Description

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device.

Affected configurations

• siemens cp1604 firmware • siemens cp1616 firmware • siemens simatic rf185c firmware (< 1.1.0) • siemens simatic cp343-1 advanced firmware • siemens simatic cp443-1 firmware • siemens simatic cp443-1 advanced firmware • siemens simatic et 200 sp open controller cpu 1515sp pc firmware (< 2.1.6) • siemens simatic et 200 sp open controller cpu 1515sp pc2 firmware (< 2.7) • siemens simatic hmi comfort outdoor panels firmware (< 15.1) • siemens simatic hmi comfort outdoor panels firmware 15.1 • siemens simatic hmi comfort panels firmware (< 15.1) • siemens simatic hmi comfort panels firmware 15.1 • siemens simatic hmi ktp mobile panels ktp400f firmware (< 15.1) • siemens simatic hmi ktp mobile panels ktp400f firmware 15.1 • siemens simatic hmi ktp mobile panels ktp700 firmware (< 15.1) • siemens simatic hmi ktp mobile panels ktp700 firmware 15.1 • siemens simatic hmi ktp mobile panels ktp700f firmware (< 15.1) • siemens simatic hmi ktp mobile panels ktp700f firmware 15.1 • siemens simatic hmi ktp mobile panels ktp900 firmware (< 15.1) • siemens simatic hmi ktp mobile panels ktp900 firmware 15.1 • siemens simatic hmi ktp mobile panels ktp900f firmware (< 15.1) • siemens simatic hmi ktp mobile panels ktp900f firmware 15.1 • siemens simatic cp443-1 opc ua • siemens simatic ipc diagmonitor (< 5.1.3) • siemens simatic s7-1500 software controller (< 2.7) • siemens simatic s7-plcsim advanced (< 2.0) • siemens simatic s7-plcsim advanced 2.0 • siemens simatic wincc runtime advanced (< 15.1) • siemens simatic wincc runtime advanced 15.1 • siemens sitop manager (< 1.1) • siemens simatic rf600r firmware (< 3.2.1) • siemens simatic rf188c firmware (< 1.1.0) • siemens simatic rf186c firmware (< 1.1.0) • siemens simatic rf182c firmware • siemens simatic rf181-eip firmware • siemens simatic s7-1500 firmware (< 2.6.1) • siemens simatic s7-300 firmware (< 3.3.17) • siemens simatic s7-400 pn firmware • siemens simatic s7-400 pn\/dp firmware • siemens simatic teleservice adapter ie advanced firmware • siemens simatic teleservice adapter ie basic firmware • siemens simatic teleservice adapter ie standard firmware • siemens simatic winac rtx firmware (< 2010) • siemens simatic winac rtx firmware 2010 • siemens simocode pro v eip firmware (< 1.1.3) • siemens simocode pro v pn firmware (< 2.1.3) • siemens sinamics g130 firmware (< 5.2) • siemens sinamics g150 firmware (< 5.2) • siemens sinamics s120 firmware (< 5.2) • siemens sinamics s150 firmware (< 5.1) • siemens sinamics s150 firmware 5.1 • siemens sinamics s210 firmware (< 5.1) • siemens sinamics s210 firmware 5.1 • siemens sitop psu8600 firmware (< 1.5) • siemens sitop ups1600 firmware (< 2.3) • siemens tim 1531 irc firmware (< 2.1) • siemens simatic s7-1500f firmware (< 2.6.1) • siemens simatic s7-1500s firmware (< 2.6.1) • siemens simatic s7-1500t firmware (< 2.6.1) • siemens sinamics gh150 firmware (< 4.8) … and 11 more

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References