5

CVE-2019-6568

The webserver of the affected devices contains a vulnerability that may lead to
a denial of service condition. An attacker may cause a denial of service
situation which leads to a restart of the webserver of the affected device.

The security vulnerability could be exploited by an attacker with network
access to the affected systems. Successful exploitation requires no system
privileges and no user interaction. An attacker could use the vulnerability
to compromise availability of the device.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Cp1604 Firmware
   Siemens ≫ Cp1604 Version -
Siemens ≫ Cp1616 Firmware
   Siemens ≫ Cp1616 Version -
Siemens ≫ Simatic Rf185c Firmware Version < 1.1.0
   Siemens ≫ Simatic Rf185c Version -
Siemens ≫ Simatic Hmi Comfort Panels Firmware Version 15.1 Update -
   Siemens ≫ Simatic Hmi Comfort Panels Version -
Siemens ≫ Simatic Ipc Diagmonitor Version < 5.1.3
Siemens ≫ Simatic S7-plcsim Advanced Version 2.0 Update -
Siemens ≫ Simatic S7-plcsim Advanced Version 2.0 Update sp1
Siemens ≫ Simatic Wincc Runtime Advanced Version 15.1 Update -
Siemens ≫ Simatic Wincc Runtime Advanced Version 15.1 Update update1
Siemens ≫ Simatic Wincc Runtime Advanced Version 15.1 Update update2
Siemens ≫ Simatic Wincc Runtime Advanced Version 15.1 Update update3
Siemens ≫ Sitop Manager Version < 1.1
Siemens ≫ Simatic Rf600r Firmware Version < 3.2.1
   Siemens ≫ Simatic Rf600r Version -
Siemens ≫ Simatic Rf188c Firmware Version < 1.1.0
   Siemens ≫ Simatic Rf188c Version -
Siemens ≫ Simatic Rf186c Firmware Version < 1.1.0
   Siemens ≫ Simatic Rf186c Version -
Siemens ≫ Simatic S7-1500 Firmware Version < 2.6.1
   Siemens ≫ Simatic S7-1500 Version -
Siemens ≫ Simatic S7-300 Firmware Version < 3.3.17
   Siemens ≫ Simatic S7-300 Version -
Siemens ≫ Simatic Winac Rtx Firmware Version < 2010
   Siemens ≫ Simatic Winac Rtx Version -
Siemens ≫ Simatic Winac Rtx Firmware Version 2010 Update -
   Siemens ≫ Simatic Winac Rtx Version -
Siemens ≫ Simocode Pro V Eip Firmware Version < 1.1.3
   Siemens ≫ Simocode Pro V Eip Version -
Siemens ≫ Simocode Pro V Pn Firmware Version < 2.1.3
   Siemens ≫ Simocode Pro V Pn Version -
Siemens ≫ Sinamics G130 Firmware Version < 5.2
   Siemens ≫ Sinamics G130 Version -
Siemens ≫ Sinamics G150 Firmware Version < 5.2
   Siemens ≫ Sinamics G150 Version -
Siemens ≫ Sinamics S120 Firmware Version < 5.2
   Siemens ≫ Sinamics S120 Version -
Siemens ≫ Sinamics S150 Firmware Version < 5.1
   Siemens ≫ Sinamics S150 Version -
Siemens ≫ Sinamics S150 Firmware Version 5.1 Update -
   Siemens ≫ Sinamics S150 Version -
Siemens ≫ Sinamics S150 Firmware Version 5.1 Update sp1
   Siemens ≫ Sinamics S150 Version -
Siemens ≫ Sinamics S150 Firmware Version 5.1 Update sp1_hotfix2
   Siemens ≫ Sinamics S150 Version -
Siemens ≫ Sinamics S210 Firmware Version < 5.1
   Siemens ≫ Sinamics S210 Version -
Siemens ≫ Sinamics S210 Firmware Version 5.1 Update -
   Siemens ≫ Sinamics S210 Version -
Siemens ≫ Sinamics S210 Firmware Version 5.1 Update sp1
   Siemens ≫ Sinamics S210 Version -
Siemens ≫ Sitop Psu8600 Firmware Version < 1.5
   Siemens ≫ Sitop Psu8600 Version -
Siemens ≫ Sitop Ups1600 Firmware Version < 2.3
   Siemens ≫ Sitop Ups1600 Version -
Siemens ≫ Tim 1531 Irc Firmware Version < 2.1
   Siemens ≫ Tim 1531 Irc Version -
Siemens ≫ Simatic S7-1500f Firmware Version < 2.6.1
   Siemens ≫ Simatic S7-1500f Version -
Siemens ≫ Simatic S7-1500s Firmware Version < 2.6.1
   Siemens ≫ Simatic S7-1500s Version -
Siemens ≫ Simatic S7-1500t Firmware Version < 2.6.1
   Siemens ≫ Simatic S7-1500t Version -
Siemens ≫ Sinamics Gh150 Firmware Version < 4.8
   Siemens ≫ Sinamics Gh150 Version -
Siemens ≫ Sinamics Gh150 Firmware Version 4.8 Update -
   Siemens ≫ Sinamics Gh150 Version -
Siemens ≫ Sinamics Gl150 Firmware Version < 4.8
   Siemens ≫ Sinamics Gl150 Version -
Siemens ≫ Sinamics Gl150 Firmware Version 4.8 Update -
   Siemens ≫ Sinamics Gl150 Version -
Siemens ≫ Sinamics Gm150 Firmware Version < 4.8
   Siemens ≫ Sinamics Gm150 Version -
Siemens ≫ Sinamics Gm150 Firmware Version 4.8 Update -
   Siemens ≫ Sinamics Gm150 Version -
Siemens ≫ Sinamics Sl150 Firmware Version < 4.8
   Siemens ≫ Sinamics Sl150 Version -
Siemens ≫ Sinamics Sl150 Firmware Version 4.8 Update -
   Siemens ≫ Sinamics Sl150 Version -
Siemens ≫ Sinamics Sm120 Firmware Version < 4.8
   Siemens ≫ Sinamics Sm120 Version -
Siemens ≫ Sinamics Sm120 Firmware Version 4.8 Update -
   Siemens ≫ Sinamics Sm120 Version -
Siemens ≫ Sinamics Sm150 Firmware Version < 5.1
   Siemens ≫ Sinamics Sm150 Version -
Siemens ≫ Sinamics Sm150 Firmware Version 5.1 Update -
   Siemens ≫ Sinamics Sm150 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.4% 0.69
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Siemens 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://cert-portal.siemens.com/productcert/pdf/ssa-480230.pdf
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-530931.pdf
Vendor Advisory