CVE-2019-10930
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions < V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), SIPROTEC 5 device types 7SS85 and 7KE85 (All versions < V8.01), SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules (All versions). A remote attacker could use specially crafted packets sent to port 443/TCP to upload, download or delete files in certain parts of the file system.
Se ha identificado una vulnerabilidad en todos los demás tipos de dispositivos SIPROTEC 5 con variantes de CPU CP300 y CP100 y los respectivos módulos de comunicación Ethernet (todas las versiones), software de ingeniería DIGSI 5 (todas las versiones anteriores a la versión V7.90), tipos de dispositivos SIPROTEC 5 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 y 7VE85 y CPU con variantes CP300 y CP100 los respectivos módulos de comunicación Ethernet (todas las versiones anteriores a la versión V7.90), tipos de dispositivos SIPROTEC 5 7SS85 y 7KE85 (todas las versiones anteriores a la versión V8.01), tipos de dispositivos SIPROTEC 5 con variantes de CP200 y los respectivos módulos de comunicación Ethernet (todas las versiones). Un atacante remoto podría usar paquetes especialmente diseñados enviados al puerto 443/TCP para cargar, descargar o eliminar archivos en ciertas partes del sistema de archivos
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-04-08 CVE Reserved
- 2019-07-11 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-434: Unrestricted Upload of File with Dangerous Type
- CWE-552: Files or Directories Accessible to External Parties
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf | 2020-06-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 6md85 Search vendor "Siemens" for product "6md85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 6md86 Search vendor "Siemens" for product "6md86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 6md89 Search vendor "Siemens" for product "6md89" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sa82 Search vendor "Siemens" for product "7sa82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sa86 Search vendor "Siemens" for product "7sa86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sa87 Search vendor "Siemens" for product "7sa87" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sd82 Search vendor "Siemens" for product "7sd82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sd86 Search vendor "Siemens" for product "7sd86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sd87 Search vendor "Siemens" for product "7sd87" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sj82 Search vendor "Siemens" for product "7sj82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sj85 Search vendor "Siemens" for product "7sj85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sj86 Search vendor "Siemens" for product "7sj86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sk82 Search vendor "Siemens" for product "7sk82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sk85 Search vendor "Siemens" for product "7sk85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sl82 Search vendor "Siemens" for product "7sl82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sl86 Search vendor "Siemens" for product "7sl86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sl87 Search vendor "Siemens" for product "7sl87" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7um85 Search vendor "Siemens" for product "7um85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7ut82 Search vendor "Siemens" for product "7ut82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7ut85 Search vendor "Siemens" for product "7ut85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7ut86 Search vendor "Siemens" for product "7ut86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7ut87 Search vendor "Siemens" for product "7ut87" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7ve85 Search vendor "Siemens" for product "7ve85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Digsi 5 Engineering Software Search vendor "Siemens" for product "Digsi 5 Engineering Software" | 7.90 Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7vk87 Search vendor "Siemens" for product "7vk87" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 6md85 Search vendor "Siemens" for product "6md85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 6md86 Search vendor "Siemens" for product "6md86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 6md89 Search vendor "Siemens" for product "6md89" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sa82 Search vendor "Siemens" for product "7sa82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sa86 Search vendor "Siemens" for product "7sa86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sa87 Search vendor "Siemens" for product "7sa87" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sd82 Search vendor "Siemens" for product "7sd82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sd86 Search vendor "Siemens" for product "7sd86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sd87 Search vendor "Siemens" for product "7sd87" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sj82 Search vendor "Siemens" for product "7sj82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sj85 Search vendor "Siemens" for product "7sj85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sj86 Search vendor "Siemens" for product "7sj86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sk82 Search vendor "Siemens" for product "7sk82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sk85 Search vendor "Siemens" for product "7sk85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sl82 Search vendor "Siemens" for product "7sl82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sl86 Search vendor "Siemens" for product "7sl86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sl87 Search vendor "Siemens" for product "7sl87" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7um85 Search vendor "Siemens" for product "7um85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7ut82 Search vendor "Siemens" for product "7ut82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7ut85 Search vendor "Siemens" for product "7ut85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7ut86 Search vendor "Siemens" for product "7ut86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7ut87 Search vendor "Siemens" for product "7ut87" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7ve85 Search vendor "Siemens" for product "7ve85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | 7.90 Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version "7.90" | - |
Affected
| in | Siemens Search vendor "Siemens" | 7vk87 Search vendor "Siemens" for product "7vk87" | - | - |
Safe
|