5

CVE-2019-10923

An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Cp1604 Firmware Version < 2.8
   Siemens ≫ Cp1604 Version -
Siemens ≫ Cp1616 Firmware Version < 2.8
   Siemens ≫ Cp1616 Version -
Siemens ≫ Ek-ertec 200 Firmware Version < 4.5.0
   Siemens ≫ Ek-ertec 200 Version -
Siemens ≫ Ek-ertec 200 Firmware Version 4.5.0 Update -
   Siemens ≫ Ek-ertec 200 Version -
Siemens ≫ Ek-ertec 200p Firmware Version < 4.5.0
   Siemens ≫ Ek-ertec 200p Version -
Siemens ≫ Scalance X-200irt Firmware Version < 5.2.1
   Siemens ≫ Scalance X-200irt Version -
Siemens ≫ Simatic S7-300 Cpu Firmware Version < 3.3.17
   Siemens ≫ Simatic S7-300 Cpu Version -
Siemens ≫ Simatic S7-300 Cpu 313 Firmware Version < 3.3.17
   Siemens ≫ Simatic S7-300 Cpu 313 Version -
Siemens ≫ Simatic S7-300 Cpu 314 Firmware Version < 3.3.17
   Siemens ≫ Simatic S7-300 Cpu 314 Version -
Siemens ≫ Simatic S7-300 Cpu 315 Firmware Version < 3.3.17
   Siemens ≫ Simatic S7-300 Cpu 315 Version -
Siemens ≫ Simatic Winac Rtx (f) Firmware Version 2010 Update -
   Siemens ≫ Simatic Winac Rtx (f) Version -
Siemens ≫ Simatic Winac Rtx (f) Firmware Version 2010 Update sp1
   Siemens ≫ Simatic Winac Rtx (f) Version -
Siemens ≫ Simatic Winac Rtx (f) Firmware Version 2010 Update sp2
   Siemens ≫ Simatic Winac Rtx (f) Version -
Siemens ≫ Simotion Firmware
   Siemens ≫ Simotion Version -
Siemens ≫ Sinamics Dcm Firmware Version < 1.5
   Siemens ≫ Sinamics Dcm Version -
Siemens ≫ Sinamics Dcm Firmware Version 1.5 Update -
   Siemens ≫ Sinamics Dcm Version -
Siemens ≫ Sinamics Dcp Firmware Version < 1.3
   Siemens ≫ Sinamics Dcp Version -
Siemens ≫ Sinamics G110m Firmware Version < 4.7
   Siemens ≫ Sinamics G110m Version -
Siemens ≫ Sinamics G110m Firmware Version 4.7 Update -
   Siemens ≫ Sinamics G110m Version -
Siemens ≫ Sinamics G120 Firmware Version < 4.7
   Siemens ≫ Sinamics G120 Version -
Siemens ≫ Sinamics G120 Firmware Version 4.7 Update -
   Siemens ≫ Sinamics G120 Version -
Siemens ≫ Sinamics G130 Firmware Version < 4.7
   Siemens ≫ Sinamics G130 Version -
Siemens ≫ Sinamics G130 Firmware Version 4.7 Update -
   Siemens ≫ Sinamics G130 Version -
Siemens ≫ Sinamics G150 Firmware Version < 4.8
   Siemens ≫ Sinamics G150 Version -
Siemens ≫ Sinamics Gh150 Firmware Version < 4.8
   Siemens ≫ Sinamics Gh150 Version -
Siemens ≫ Sinamics Gh150 Firmware Version 4.8 Update -
   Siemens ≫ Sinamics Gh150 Version -
Siemens ≫ Sinamics Gl150 Firmware Version < 4.8
   Siemens ≫ Sinamics Gl150 Version -
Siemens ≫ Sinamics Gl150 Firmware Version 4.8 Update -
   Siemens ≫ Sinamics Gl150 Version -
Siemens ≫ Sinamics Gm150 Firmware Version < 4.8
   Siemens ≫ Sinamics Gm150 Version -
Siemens ≫ Sinamics Gm150 Firmware Version 4.8 Update -
   Siemens ≫ Sinamics Gm150 Version -
Siemens ≫ Sinamics S120 Firmware Version < 4.7
   Siemens ≫ Sinamics S120 Version -
Siemens ≫ Sinamics S120 Firmware Version 4.7 Update -
   Siemens ≫ Sinamics S120 Version -
Siemens ≫ Sinamics S150 Firmware Version < 4.8
   Siemens ≫ Sinamics S150 Version -
Siemens ≫ Sinamics Sl150 Firmware Version < 4.7
   Siemens ≫ Sinamics Sl150 Version -
Siemens ≫ Sinamics Sl150 Firmware Version 4.7 Update -
   Siemens ≫ Sinamics Sl150 Version -
Siemens ≫ Sinumerik 828d Version < 4.8
Siemens ≫ Sinumerik 828d Version 4.8 Update -
Siemens ≫ Sinumerik 828d Version 4.8 Update sp1
Siemens ≫ Sinumerik 828d Version 4.8 Update sp2
Siemens ≫ Sinumerik 828d Version 4.8 Update sp3
Siemens ≫ Sinumerik 828d Version 4.8 Update sp4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.4% 0.69
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Siemens 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://cert-portal.siemens.com/productcert/html/ssa-349422.html
https://cert-portal.siemens.com/productcert/pdf/ssa-349422.pdf
Vendor Advisory