CVE-2019-18336highCWE-400

CVE-2019-18336: falha de alta gravidade em Siemens AG SIMATIC S7-300 CPU family (incl.

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SINUMERIK 840D sl+ Monitorar SIMATIC TDC CP51M1

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 1.7%
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.X.17), SIMATIC TDC CP51M1 (All versions < V1.1.8), SIMATIC TDC CPU555 (All versions < V1.1.1), SINUMERIK 840D sl (All versions < V4.8.6), SINUMERIK 840D sl (All versions < V4.94). Specially crafted packets sent to port 102/tcp (Profinet) could cause the affected device to go into defect mode. A restart is required in order to recover the system. Successful exploitation requires an attacker to have network access to port 102/tcp, with no authentication. No user interation is required. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Siemens AG · SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)Siemens AG · SIMATIC TDC CP51M1Siemens AG · SIMATIC TDC CPU555Siemens AG · SINUMERIK 840D sl
CVEs relacionadas — Siemens AG SIMATIC S7-300 CPU family (incl.

No mesmo produto, das mais perigosas para as menos.

CVE-2016-9158HIGHCVE-2016-9158EPSS 3.1%CVE-2016-9159MEDIUMCVE-2016-9159EPSS 1.5%CVE-2019-10937—CVE-2019-10937EPSS 1.3%