CVEvulnerability
CVE-2019-6568
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-04-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-125
Description
The webserver of the affected devices contains a vulnerability that may lead to
a denial of service condition. An attacker may cause a denial of service
situation which leads to a restart of the webserver of the affected device.
The security vulnerability could be exploited by an attacker with network
access to the affected systems. Successful exploitation requires no system
privileges and no user interaction. An attacker could use the vulnerability
to compromise availability of the device.
Affected configurations
• siemens cp1604 firmware
• siemens cp1616 firmware
• siemens simatic rf185c firmware (< 1.1.0)
• siemens simatic cp343-1 advanced firmware
• siemens simatic cp443-1 firmware
• siemens simatic cp443-1 advanced firmware
• siemens simatic et 200 sp open controller cpu 1515sp pc firmware (< 2.1.6)
• siemens simatic et 200 sp open controller cpu 1515sp pc2 firmware (< 2.7)
• siemens simatic hmi comfort outdoor panels firmware (< 15.1)
• siemens simatic hmi comfort outdoor panels firmware 15.1
• siemens simatic hmi comfort panels firmware (< 15.1)
• siemens simatic hmi comfort panels firmware 15.1
• siemens simatic hmi ktp mobile panels ktp400f firmware (< 15.1)
• siemens simatic hmi ktp mobile panels ktp400f firmware 15.1
• siemens simatic hmi ktp mobile panels ktp700 firmware (< 15.1)
• siemens simatic hmi ktp mobile panels ktp700 firmware 15.1
• siemens simatic hmi ktp mobile panels ktp700f firmware (< 15.1)
• siemens simatic hmi ktp mobile panels ktp700f firmware 15.1
• siemens simatic hmi ktp mobile panels ktp900 firmware (< 15.1)
• siemens simatic hmi ktp mobile panels ktp900 firmware 15.1
• siemens simatic hmi ktp mobile panels ktp900f firmware (< 15.1)
• siemens simatic hmi ktp mobile panels ktp900f firmware 15.1
• siemens simatic cp443-1 opc ua
• siemens simatic ipc diagmonitor (< 5.1.3)
• siemens simatic s7-1500 software controller (< 2.7)
• siemens simatic s7-plcsim advanced (< 2.0)
• siemens simatic s7-plcsim advanced 2.0
• siemens simatic wincc runtime advanced (< 15.1)
• siemens simatic wincc runtime advanced 15.1
• siemens sitop manager (< 1.1)
• siemens simatic rf600r firmware (< 3.2.1)
• siemens simatic rf188c firmware (< 1.1.0)
• siemens simatic rf186c firmware (< 1.1.0)
• siemens simatic rf182c firmware
• siemens simatic rf181-eip firmware
• siemens simatic s7-1500 firmware (< 2.6.1)
• siemens simatic s7-300 firmware (< 3.3.17)
• siemens simatic s7-400 pn firmware
• siemens simatic s7-400 pn\/dp firmware
• siemens simatic teleservice adapter ie advanced firmware
• siemens simatic teleservice adapter ie basic firmware
• siemens simatic teleservice adapter ie standard firmware
• siemens simatic winac rtx firmware (< 2010)
• siemens simatic winac rtx firmware 2010
• siemens simocode pro v eip firmware (< 1.1.3)
• siemens simocode pro v pn firmware (< 2.1.3)
• siemens sinamics g130 firmware (< 5.2)
• siemens sinamics g150 firmware (< 5.2)
• siemens sinamics s120 firmware (< 5.2)
• siemens sinamics s150 firmware (< 5.1)
• siemens sinamics s150 firmware 5.1
• siemens sinamics s210 firmware (< 5.1)
• siemens sinamics s210 firmware 5.1
• siemens sitop psu8600 firmware (< 1.5)
• siemens sitop ups1600 firmware (< 2.3)
• siemens tim 1531 irc firmware (< 2.1)
• siemens simatic s7-1500f firmware (< 2.6.1)
• siemens simatic s7-1500s firmware (< 2.6.1)
• siemens simatic s7-1500t firmware (< 2.6.1)
• siemens sinamics gh150 firmware (< 4.8)
… and 11 more
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-480230.pdf Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-530931.pdf Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-480230.pdf Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-530931.pdf Vendor Advisory