CVE-2019-6568
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD (Secondary)
Description
The webserver of the affected devices contains a vulnerability that may lead to
a denial of service condition. An attacker may cause a denial of service
situation which leads to a restart of the webserver of the affected device.
The security vulnerability could be exploited by an attacker with network
access to the affected systems. Successful exploitation requires no system
privileges and no user interaction. An attacker could use the vulnerability
to compromise availability of the device.
Affected (78)
Products: Siemens: Cp1604 Firmware, Cp1616 Firmware, Simatic Rf185c Firmware, Simatic Cp343 1 Advanced Firmware, Simatic Cp443 1 Firmware, Simatic Cp443 1 Advanced Firmware, Simatic Et 200 Sp Open Controller Cpu 1515sp Pc Firmware, Simatic Et 200 Sp Open Controller Cpu 1515sp Pc2 Firmware, Simatic Hmi Comfort Outdoor Panels Firmware, Simatic Hmi Comfort Panels Firmware, Simatic Hmi Ktp Mobile Panels Ktp400f Firmware, Simatic Hmi Ktp Mobile Panels Ktp700 Firmware, Simatic Hmi Ktp Mobile Panels Ktp700f Firmware, Simatic Hmi Ktp Mobile Panels Ktp900 Firmware, Simatic Hmi Ktp Mobile Panels Ktp900f Firmware, Simatic Cp443 1 Opc Ua, Simatic Ipc Diagmonitor, Simatic S7 1500 Software Controller, Simatic S7 Plcsim Advanced, Simatic Wincc Runtime Advanced, Sitop Manager, Simatic Rf600r Firmware, Simatic Rf188c Firmware, Simatic Rf186c Firmware, Simatic Rf182c Firmware, Simatic Rf181 Eip Firmware, Simatic S7 1500 Firmware, Simatic S7 300 Firmware, Simatic S7 400 Pn Firmware, Simatic S7 400 Pn/dp Firmware, Simatic Teleservice Adapter Ie Advanced Firmware, Simatic Teleservice Adapter Ie Basic Firmware, Simatic Teleservice Adapter Ie Standard Firmware, Simatic Winac Rtx Firmware, Simocode Pro V Eip Firmware, Simocode Pro V Pn Firmware, Sinamics G130 Firmware, Sinamics G150 Firmware, Sinamics S120 Firmware, Sinamics S150 Firmware, Sinamics S210 Firmware, Sitop Psu8600 Firmware, Sitop Ups1600 Firmware, Tim 1531 Irc Firmware, Simatic S7 1500f Firmware, Simatic S7 1500s Firmware, Simatic S7 1500t Firmware, Sinamics Gh150 Firmware, Sinamics Gl150 Firmware, Sinamics Gm150 Firmware, Sinamics Sl150 Firmware, Sinamics Sm120 Firmware, Sinamics Sm150 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Cp1604 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Cp1616 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.0 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Rf185c | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Cp343 1 Advanced | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Cp443 1 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Cp443 1 Advanced | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.1.6 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Et 200 Sp Open Controller Cpu 1515sp Pc | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.7 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Et 200 Sp Open Controller Cpu 1515sp Pc2 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Comfort Outdoor Panels | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Comfort Panels | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Ktp Mobile Panels Ktp400f | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Ktp Mobile Panels Ktp700 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Ktp Mobile Panels Ktp700f | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Ktp Mobile Panels Ktp900 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Ktp Mobile Panels Ktp900f | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| All versions | |
| Before 5.1.3 | |
| Before 2.7 | |
| Before 2.0 | |
| Before 15.1 | |
| Before 1.1 |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Rf600r | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.0 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Rf188c | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.0 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Rf186c | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Rf182c | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Rf181 Eip | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 1500 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.3.17 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 300 | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 400 Pn | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 400 Pn/dp | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Teleservice Adapter Ie Advanced | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Teleservice Adapter Ie Basic | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Teleservice Adapter Ie Standard | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2010 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Winac Rtx | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.3 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simocode Pro V Eip | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.1.3 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simocode Pro V Pn | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 5.2 |
| Running on/with | Platform Versions |
|---|---|
Siemens Sinamics G130 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 5.2 |
| Running on/with | Platform Versions |
|---|---|
Siemens Sinamics G150 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 5.2 |
| Running on/with | Platform Versions |
|---|---|
Siemens Sinamics S120 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 5.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Sinamics S150 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 5.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Sinamics S210 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.5 |
| Running on/with | Platform Versions |
|---|---|
Siemens Sitop Psu8600 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.3 |
| Running on/with | Platform Versions |
|---|---|
Siemens Sitop Ups1600 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Tim 1531 Irc | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 1500f | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 1500s | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 1500t | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 4.8 |
| Running on/with | Platform Versions |
|---|---|
Siemens Sinamics Gh150 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 4.8 |
| Running on/with | Platform Versions |
|---|---|
Siemens Sinamics Gl150 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 4.8 |
| Running on/with | Platform Versions |
|---|---|
Siemens Sinamics Gm150 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 4.8 |
| Running on/with | Platform Versions |
|---|---|
Siemens Sinamics Sl150 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 4.8 |
| Running on/with | Platform Versions |
|---|---|
Siemens Sinamics Sm120 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 5.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Sinamics Sm150 | All versions |
References (4)
Source: productcert@siemens.com
Vendor Advisory
Source: productcert@siemens.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.