CVE-2019-10938
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A vulnerability has been identified in SIPROTEC 5 devices with CPU variants CP200 (All versions < V7.59), SIPROTEC 5 devices with CPU variants CP300 and CP100 (All versions < V8.01), Siemens Power Meters Series 9410 (All versions < V2.2.1), Siemens Power Meters Series 9810 (All versions). An unauthenticated attacker with network access to the device could potentially insert arbitrary code which is executed before firmware verification in the device. At the time of advisory publication no public exploitation of this security vulnerability was known.
Se ha identificado una vulnerabilidad en los dispositivos SIPROTEC 5 con variantes de CP200 (Todas las versiones anteriores a la versión V7.59), dispositivos SIPROTEC 5 con variantes de CP300 y CP100 (Todas las versiones anteriores a la versión V8.01), Siemens Power Meters Series 9410 (Todas las versiones anteriores a la versión V2.2.1), Siemens Power Meters Series 9810 (Todas las versiones). Un atacante no autenticado con acceso de red al dispositivo podría insertar un código arbitrario que se ejecuta antes de la verificación del firmware en el dispositivo. En el momento de la publicación del aviso, no se conocía la explotación pública de esta vulnerabilidad de seguridad
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-04-08 CVE Reserved
- 2019-08-02 CVE Published
- 2023-06-23 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-284: Improper Access Control
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf | 2020-10-02 | |
| https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf | 2020-10-02 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 6md85 Search vendor "Siemens" for product "6md85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 6md86 Search vendor "Siemens" for product "6md86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 6md89 Search vendor "Siemens" for product "6md89" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sa82 Search vendor "Siemens" for product "7sa82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sa86 Search vendor "Siemens" for product "7sa86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sa87 Search vendor "Siemens" for product "7sa87" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sd82 Search vendor "Siemens" for product "7sd82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sd86 Search vendor "Siemens" for product "7sd86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sd87 Search vendor "Siemens" for product "7sd87" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sj82 Search vendor "Siemens" for product "7sj82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sj85 Search vendor "Siemens" for product "7sj85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sj86 Search vendor "Siemens" for product "7sj86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sk82 Search vendor "Siemens" for product "7sk82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sk85 Search vendor "Siemens" for product "7sk85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sl82 Search vendor "Siemens" for product "7sl82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sl86 Search vendor "Siemens" for product "7sl86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7sl87 Search vendor "Siemens" for product "7sl87" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7um85 Search vendor "Siemens" for product "7um85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7ut82 Search vendor "Siemens" for product "7ut82" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7ut85 Search vendor "Siemens" for product "7ut85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7ut86 Search vendor "Siemens" for product "7ut86" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7ut87 Search vendor "Siemens" for product "7ut87" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7ve85 Search vendor "Siemens" for product "7ve85" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Siprotec 5 Digsi Device Driver Search vendor "Siemens" for product "Siprotec 5 Digsi Device Driver" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | 7vk87 Search vendor "Siemens" for product "7vk87" | - | - |
Safe
|