// For flags

CVE-2019-10931

 

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions < V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), SIPROTEC 5 device types 7SS85 and 7KE85 (All versions < V8.01), SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.59), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.59). Specially crafted packets sent to port 443/TCP could cause a Denial of Service condition.

Se ha identificado una vulnerabilidad en todos los demás tipos de dispositivos SIPROTEC 5 con variantes de CPU CP300 y CP100 y los respectivos módulos de comunicación Ethernet (todas las versiones), software de ingeniería DIGSI 5 (Todas las versiones anteriores a la versión V7.90), tipos de dispositivos SIPROTEC 5 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 y 7VE85 con variantes de CPU CP300 y CP100 los respectivos módulos de comunicación Ethernet (Todas las versiones anteriores a la versión V7.90), tipos de dispositivos SIPROTEC 5 7SS85 y 7KE85 (Todas las versiones anteriores a la versión V8.01), tipos de dispositivos SIPROTEC 5 con variantes CPU CP200 y los respectivos módulos de comunicación Ethernet (Todas las versiones anteriores a la versión V7.59), los relés SIPROTEC 5 con las variantes de CPU CP200 y los respectivos módulos de comunicación Ethernet (Todas las versiones anteriores a la versión V7.59). Los paquetes especialmente diseñados enviados al puerto 443/TCP podrían causar una condición de denegación de servicio

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2019-04-08 CVE Reserved
  • 2019-07-11 CVE Published
  • 2023-03-07 EPSS Updated
  • 2024-08-04 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-248: Uncaught Exception
CAPEC
References (1)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
6md85
Search vendor "Siemens" for product "6md85"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
6md86
Search vendor "Siemens" for product "6md86"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
6md89
Search vendor "Siemens" for product "6md89"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7sa82
Search vendor "Siemens" for product "7sa82"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7sa86
Search vendor "Siemens" for product "7sa86"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7sa87
Search vendor "Siemens" for product "7sa87"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7sd82
Search vendor "Siemens" for product "7sd82"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7sd86
Search vendor "Siemens" for product "7sd86"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7sd87
Search vendor "Siemens" for product "7sd87"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7sj82
Search vendor "Siemens" for product "7sj82"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7sj85
Search vendor "Siemens" for product "7sj85"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7sj86
Search vendor "Siemens" for product "7sj86"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7sk82
Search vendor "Siemens" for product "7sk82"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7sk85
Search vendor "Siemens" for product "7sk85"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7sl82
Search vendor "Siemens" for product "7sl82"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7sl86
Search vendor "Siemens" for product "7sl86"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7sl87
Search vendor "Siemens" for product "7sl87"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7um85
Search vendor "Siemens" for product "7um85"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7ut82
Search vendor "Siemens" for product "7ut82"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7ut85
Search vendor "Siemens" for product "7ut85"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7ut86
Search vendor "Siemens" for product "7ut86"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7ut87
Search vendor "Siemens" for product "7ut87"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7ve85
Search vendor "Siemens" for product "7ve85"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 7.90
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 7.90"
-
Affected
in Siemens
Search vendor "Siemens"
7vk87
Search vendor "Siemens" for product "7vk87"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 8.01
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 8.01"
-
Affected
in Siemens
Search vendor "Siemens"
7ke85
Search vendor "Siemens" for product "7ke85"
--
Safe
Siemens
Search vendor "Siemens"
Siprotec 5 Digsi Device Driver
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver"
< 8.01
Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" and version " < 8.01"
-
Affected
in Siemens
Search vendor "Siemens"
7ss85
Search vendor "Siemens" for product "7ss85"
--
Safe
Siemens
Search vendor "Siemens"
Digsi 5 Engineering Software
Search vendor "Siemens" for product "Digsi 5 Engineering Software"
< 7.90
Search vendor "Siemens" for product "Digsi 5 Engineering Software" and version " < 7.90"
-
Affected