CVE-2019-6833
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels (all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU), which could cause a temporary freeze of the HMI when a high rate of frames is received. When the attack stops, the buffered commands are processed by the HMI panel.
Existe una vulnerabilidad CWE-754 - Comprobación inadecuada de condiciones inusuales o excepcionales en los paneles Magelis HMI (todas las versiones de - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU) congelación temporal de la HMI cuando se recibe una alta tasa de tramas. Cuando se detiene el ataque, el panel de HMI procesa los comandos almacenados en el búfer.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-01-25 CVE Reserved
- 2019-09-17 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-754: Improper Check for Unusual or Exceptional Conditions
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://security.cse.iitk.ac.in/responsible-disclosure | X_refsource_misc |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-225-01 | 2020-02-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Schneider-electric Search vendor "Schneider-electric" | Hmigto Firmware Search vendor "Schneider-electric" for product "Hmigto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmigto1300 Search vendor "Schneider-electric" for product "Hmigto1300" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigto Firmware Search vendor "Schneider-electric" for product "Hmigto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmigto1310 Search vendor "Schneider-electric" for product "Hmigto1310" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigto Firmware Search vendor "Schneider-electric" for product "Hmigto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmigto2300 Search vendor "Schneider-electric" for product "Hmigto2300" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigto Firmware Search vendor "Schneider-electric" for product "Hmigto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmigto2310 Search vendor "Schneider-electric" for product "Hmigto2310" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigto Firmware Search vendor "Schneider-electric" for product "Hmigto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmigto2315 Search vendor "Schneider-electric" for product "Hmigto2315" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigto Firmware Search vendor "Schneider-electric" for product "Hmigto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmigto3510 Search vendor "Schneider-electric" for product "Hmigto3510" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigto Firmware Search vendor "Schneider-electric" for product "Hmigto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmigto4310 Search vendor "Schneider-electric" for product "Hmigto4310" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigto Firmware Search vendor "Schneider-electric" for product "Hmigto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmigto5310 Search vendor "Schneider-electric" for product "Hmigto5310" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigto Firmware Search vendor "Schneider-electric" for product "Hmigto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmigto5315 Search vendor "Schneider-electric" for product "Hmigto5315" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigto Firmware Search vendor "Schneider-electric" for product "Hmigto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmigto6310 Search vendor "Schneider-electric" for product "Hmigto6310" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigto Firmware Search vendor "Schneider-electric" for product "Hmigto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmigto6315 Search vendor "Schneider-electric" for product "Hmigto6315" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmisto Firmware Search vendor "Schneider-electric" for product "Hmisto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmisto501 Search vendor "Schneider-electric" for product "Hmisto501" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmisto Firmware Search vendor "Schneider-electric" for product "Hmisto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmisto511 Search vendor "Schneider-electric" for product "Hmisto511" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmisto Firmware Search vendor "Schneider-electric" for product "Hmisto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmisto512 Search vendor "Schneider-electric" for product "Hmisto512" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmisto Firmware Search vendor "Schneider-electric" for product "Hmisto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmisto531 Search vendor "Schneider-electric" for product "Hmisto531" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmisto Firmware Search vendor "Schneider-electric" for product "Hmisto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmisto532 Search vendor "Schneider-electric" for product "Hmisto532" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmisto Firmware Search vendor "Schneider-electric" for product "Hmisto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmisto705 Search vendor "Schneider-electric" for product "Hmisto705" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmisto Firmware Search vendor "Schneider-electric" for product "Hmisto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmisto715 Search vendor "Schneider-electric" for product "Hmisto715" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmisto Firmware Search vendor "Schneider-electric" for product "Hmisto Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmisto735 Search vendor "Schneider-electric" for product "Hmisto735" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Xbtgh Firmware Search vendor "Schneider-electric" for product "Xbtgh Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Xbtgh2460 Search vendor "Schneider-electric" for product "Xbtgh2460" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigtu Firmware Search vendor "Schneider-electric" for product "Hmigtu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmig2u Search vendor "Schneider-electric" for product "Hmig2u" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigtu Firmware Search vendor "Schneider-electric" for product "Hmigtu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmig3u Search vendor "Schneider-electric" for product "Hmig3u" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigtu Firmware Search vendor "Schneider-electric" for product "Hmigtu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmig3ufc Search vendor "Schneider-electric" for product "Hmig3ufc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigtu Firmware Search vendor "Schneider-electric" for product "Hmigtu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmig5u Search vendor "Schneider-electric" for product "Hmig5u" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigtu Firmware Search vendor "Schneider-electric" for product "Hmigtu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmig5u2 Search vendor "Schneider-electric" for product "Hmig5u2" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigtu Firmware Search vendor "Schneider-electric" for product "Hmigtu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmig5ufc Search vendor "Schneider-electric" for product "Hmig5ufc" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigtu Firmware Search vendor "Schneider-electric" for product "Hmigtu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmig5ul8a Search vendor "Schneider-electric" for product "Hmig5ul8a" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmiscu Firmware Search vendor "Schneider-electric" for product "Hmiscu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmiscu6a5 Search vendor "Schneider-electric" for product "Hmiscu6a5" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmiscu Firmware Search vendor "Schneider-electric" for product "Hmiscu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmiscu6b5 Search vendor "Schneider-electric" for product "Hmiscu6b5" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmiscu Firmware Search vendor "Schneider-electric" for product "Hmiscu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmiscu8a5 Search vendor "Schneider-electric" for product "Hmiscu8a5" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmiscu Firmware Search vendor "Schneider-electric" for product "Hmiscu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmiscu8b5 Search vendor "Schneider-electric" for product "Hmiscu8b5" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmistu Firmware Search vendor "Schneider-electric" for product "Hmistu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmistu655 Search vendor "Schneider-electric" for product "Hmistu655" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmistu Firmware Search vendor "Schneider-electric" for product "Hmistu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmistu655w Search vendor "Schneider-electric" for product "Hmistu655w" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmistu Firmware Search vendor "Schneider-electric" for product "Hmistu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmistu855 Search vendor "Schneider-electric" for product "Hmistu855" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmistu Firmware Search vendor "Schneider-electric" for product "Hmistu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmistu855w Search vendor "Schneider-electric" for product "Hmistu855w" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Xbtgt Firmware Search vendor "Schneider-electric" for product "Xbtgt Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Xbtgt2430 Search vendor "Schneider-electric" for product "Xbtgt2430" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Xbtgt Firmware Search vendor "Schneider-electric" for product "Xbtgt Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Xbtgt2930 Search vendor "Schneider-electric" for product "Xbtgt2930" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigxo Firmware Search vendor "Schneider-electric" for product "Hmigxo Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmigxo Search vendor "Schneider-electric" for product "Hmigxo" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigxu Firmware Search vendor "Schneider-electric" for product "Hmigxu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmigxu35 Search vendor "Schneider-electric" for product "Hmigxu35" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Hmigxu Firmware Search vendor "Schneider-electric" for product "Hmigxu Firmware" | - | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Hmigxu55 Search vendor "Schneider-electric" for product "Hmigxu55" | - | - |
Safe
|