Skip to content
Connect AISign inSign up free
CVE-2019-10931Not scoredCWE-248

CVE-2019-10931: Siemens AG All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the res… vulnerability

Siemens AG · All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the res…

Affected: Siemens AG All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the res… · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.5%probability of exploitation in the next 30 days
74th percentile
050100

Higher than 74% of scored CVEs

Not scored yet. The CVE record carries no CVSS score.

DescriptionCVE.org

A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions < V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), SIPROTEC 5 device types 7SS85 and 7KE85 (All versions < V8.01), SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.59), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.59). Specially crafted packets sent to port 443/TCP could cause a Denial of Service condition.

Affected products6

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Siemens AG · All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modulesAll versions
  • Siemens AG · DIGSI 5 engineering softwareAll versions < V7.90
  • Siemens AG · SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL8…All versions < V7.90
  • Siemens AG · SIPROTEC 5 device types 7SS85 and 7KE85All versions < V8.01
  • Siemens AG · SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modulesAll versions < V7.59
  • Siemens AG · SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modulesAll versions < V7.59

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV
Not listed
Public check
No public nuclei template
Published
July 2019

CoverageNo articles yet

No CyberSIXT article names CVE-2019-10931 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References