GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

BDU:2019-04219 (CVE-2019-10936)

Vulnerability from fstec – Published: 2019-11-25 – Updated: 2020-01-09 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимость программно-аппаратного обеспечения Siemens, связанная с ошибками обработки большого количества UDP-пакетов, позволяющая нарушителю вызвать отказ в обслуживании
Summary
Уязвимость программно-аппаратного обеспечения Siemens связана с ошибками обработки большого количества UDP-пакетов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании
Severity
7.8 (High) CVSS 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:C
7.5 (High) CVSS 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Resource exhaustion
Incidents
Being clarified
Remediation
Software update
CWE
  • CWE-400 - Неконтролируемый расход ресурса («Истощение ресурса»)
Aliases
CVE-2019-10936, SSA-473245
References
Impacted products
Vendors
Siemens AG
Products
SIMATIC ET 200ecoPN, SIMATIC ET 200M, SIMATIC ET 200pro, SIMATIC ET 200S, SINUMERIK 840D sl, SIMATIC HMI KTP Mobile Panels, SIMATIC ET 200AL, SIMATIC HMI Comfort Outdoor Panels 7" and 15", SIMATIC HMI Comfort 4 -22" Panels, SIMATIC S7-400-H, SIMATIC S7-400 PN/DP V7 включая F, SIMATIC WinAC RTX 2010 incl. F, SINAMICS DCM, SINAMICS DCP, SINAMICS G110M, SINAMICS GH150, SINAMICS GL150, SINAMICS GM150, SINAMICS S110, SINAMICS SM120, SINUMERIK 828D, Development/Evaluation Kits for PROFINET IO DK Standard Ethernet Controller, Development/Evaluation Kits for PROFINET IO EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO EK-ERTEC 200P, SIMATIC CFU PA, SIMATIC ET 200MP IM155-5 PN BA, SIMATIC ET 200MP IM155-5 PN HF, SIMATIC ET 200MP IM155-5 PN ST, SIMATIC ET 200SP IM 155-6 PN BA, SIMATIC ET 200SP IM 155-6 PN HA, SIMATIC ET 200SP IM155-6 PN HF, SIMATIC ET 200SP IM155-6 PN ST, SIMATIC ET 200SP IM 155-6 PN/2 HF, SIMATIC ET 200SP IM 155-6 PN/3 HF, SIMATIC PN/PN Coupler, SIMATIC PROFINET Driver, SIMATIC S7-1200 включая F, SIMATIC S7-1500 CPU family (incl. F), SIMATIC S7-300 CPU family (incl. F), SIMATIC S7-400 включая F, SIMATIC S7-410, SINAMICS G150, SINAMICS S150, SIMATIC ET 200SP IM 155-6 PN HS, SINAMICS G130, SINAMICS S120, SINAMICS SL150
Versions
- (SIMATIC ET 200ecoPN), - (SIMATIC ET 200M), - (SIMATIC ET 200pro), - (SIMATIC ET 200S), - (SINUMERIK 840D sl), - (SIMATIC HMI KTP Mobile Panels), - (SIMATIC ET 200AL), - (SIMATIC HMI Comfort Outdoor Panels 7" and 15"), - (SIMATIC HMI Comfort 4 -22" Panels), от 6 до 6.0.9 (SIMATIC S7-400-H), - (SIMATIC S7-400 PN/DP V7 включая F), до SP3 (SIMATIC WinAC RTX 2010 incl. F), до V1.5 HF1 (SINAMICS DCM), - (SINAMICS DCP), от V4.7 до V4.7 SP10 HF5 (SINAMICS G110M), V4.7 (SINAMICS GH150), V4.7 (SINAMICS GL150), V4.7 (SINAMICS GM150), - (SINAMICS S110), V4.7 (SINAMICS SM120), до V4.8 SP5 (SINUMERIK 828D), - (Development/Evaluation Kits for PROFINET IO DK Standard Ethernet Controller), - (Development/Evaluation Kits for PROFINET IO EK-ERTEC 200), - (Development/Evaluation Kits for PROFINET IO EK-ERTEC 200P), до V1.2.0 (SIMATIC CFU PA), - (SIMATIC ET 200MP IM155-5 PN BA), - (SIMATIC ET 200MP IM155-5 PN HF), - (SIMATIC ET 200MP IM155-5 PN ST), - (SIMATIC ET 200SP IM 155-6 PN BA), - (SIMATIC ET 200SP IM 155-6 PN HA), до V4.2.2 (SIMATIC ET 200SP IM155-6 PN HF), - (SIMATIC ET 200SP IM155-6 PN HF), - (SIMATIC ET 200SP IM155-6 PN ST), до V4.2.2 (SIMATIC ET 200SP IM 155-6 PN/2 HF), до V4.2.1 (SIMATIC ET 200SP IM 155-6 PN/3 HF), - (SIMATIC PN/PN Coupler), до V2.1 (SIMATIC PROFINET Driver), - (SIMATIC S7-1200 включая F), до V2.0 (SIMATIC S7-1500 CPU family (incl. F)), - (SIMATIC S7-300 CPU family (incl. F)), до V6 (SIMATIC S7-400 включая F), V8 (SIMATIC S7-410), - (SINAMICS G150), - (SINAMICS S150), - (SIMATIC ET 200SP IM 155-6 PN HS), от 4.7 до 5.2 HF1 (SINAMICS G130), от V4.7 до V5.2 HF4 (SINAMICS S120), от V4.7 до V4.7 HF33 (SINAMICS SL150)
Product types
ПО программно-аппаратного средства АСУ ТП, Network appliance software, Industrial control system software, Appliance software
Mitigations
Обновление программного обеспечения: Для SIMATIC CFU PA до V1.2.0: https://support.industry.siemens.com/cs/ww/en/view/109754628 Для SIMATIC ET 200MP IM 155-5 PN BA до V4.2.3: https://support.industry.siemens.com/cs/ww/en/view/109754281 Для SIMATIC ET 200SP IM 155-6 PN HF до V4.2.2: https://support.industry.siemens.com/cs/ww/en/view/85624387 Для SIMATIC ET 200SP IM 155-6 PN/2 HF до V4.2.2: https://support.industry.siemens.com/cs/ww/en/view/109769765 Для SIMATIC ET 200SP IM 155-6 PN/3 HF до V4.2.1: https://support.industry.siemens.com/cs/ww/en/view/109769419 Для SIMATIC PROFINET Driver до V2.1: https://support.industry.siemens.com/cs/ww/en/view/109768047 Для SIMATIC S7-400H V6 до V6.0.9: https://support.industry.siemens.com/cs/ww/en/view/109474550 Для SIMATIC WinAC RTX (F) 2010 до SIMATIC WinAC RTX 2010 SP3: https://support.industry.siemens.com/cs/ww/en/view/109765109 Для SINAMICS DCM до V1.5 HF1: https://support.industry.siemens.com/cs/ww/en/view/44029688 Для SINAMICS G110M и G120 V4.7 до V4.7 SP10 HF5: https://support.industry.siemens.com/cs/ww/en/view/109756820 Для SINAMICS GH150, GL150 и GM150 V4.7 до V4.8 SP2 HF9: Для обновления обратитесь в сервис поддержки Siemens Для SINUMERIK 828D до V4.8 SP5: Для обновления обратитесь в сервис поддержки Siemens Компенсирующие меры: Ограничить доступ к сети
To clipboard 

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Siemens AG",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (SIMATIC ET 200ecoPN), - (SIMATIC ET 200M), - (SIMATIC ET 200pro), - (SIMATIC ET 200S), - (SINUMERIK 840D sl), - (SIMATIC HMI KTP Mobile Panels), - (SIMATIC ET 200AL), - (SIMATIC HMI Comfort Outdoor Panels 7\" and 15\"), - (SIMATIC HMI Comfort 4 -22\" Panels), \u043e\u0442 6 \u0434\u043e 6.0.9 (SIMATIC S7-400-H), - (SIMATIC S7-400 PN/DP V7 \u0432\u043a\u043b\u044e\u0447\u0430\u044f F), \u0434\u043e SP3 (SIMATIC WinAC RTX 2010 incl. F), \u0434\u043e V1.5 HF1 (SINAMICS DCM), - (SINAMICS DCP), \u043e\u0442 V4.7 \u0434\u043e V4.7 SP10 HF5 (SINAMICS G110M), V4.7 (SINAMICS GH150), V4.7 (SINAMICS GL150), V4.7 (SINAMICS GM150), - (SINAMICS S110), V4.7 (SINAMICS SM120), \u0434\u043e V4.8 SP5 (SINUMERIK 828D), - (Development/Evaluation Kits for PROFINET IO DK Standard Ethernet Controller), - (Development/Evaluation Kits for PROFINET IO EK-ERTEC 200), - (Development/Evaluation Kits for PROFINET IO EK-ERTEC 200P), \u0434\u043e V1.2.0 (SIMATIC CFU PA), - (SIMATIC ET 200MP IM155-5 PN BA), - (SIMATIC ET 200MP IM155-5 PN HF), - (SIMATIC ET 200MP IM155-5 PN ST), - (SIMATIC ET 200SP IM 155-6 PN BA), - (SIMATIC ET 200SP IM 155-6 PN HA), \u0434\u043e V4.2.2 (SIMATIC ET 200SP IM155-6 PN HF), - (SIMATIC ET 200SP IM155-6 PN HF), - (SIMATIC ET 200SP IM155-6 PN ST), \u0434\u043e V4.2.2 (SIMATIC ET 200SP IM 155-6 PN/2 HF), \u0434\u043e V4.2.1 (SIMATIC ET 200SP IM 155-6 PN/3 HF), - (SIMATIC PN/PN Coupler), \u0434\u043e V2.1 (SIMATIC PROFINET Driver), - (SIMATIC S7-1200 \u0432\u043a\u043b\u044e\u0447\u0430\u044f F), \u0434\u043e V2.0 (SIMATIC S7-1500 CPU family (incl. F)), - (SIMATIC S7-300 CPU family (incl. F)), \u0434\u043e V6 (SIMATIC S7-400 \u0432\u043a\u043b\u044e\u0447\u0430\u044f F), V8 (SIMATIC S7-410), - (SINAMICS G150), - (SINAMICS S150), - (SIMATIC ET 200SP IM 155-6 PN HS), \u043e\u0442 4.7 \u0434\u043e 5.2 HF1 (SINAMICS G130), \u043e\u0442 V4.7 \u0434\u043e V5.2 HF4 (SINAMICS S120), \u043e\u0442 V4.7 \u0434\u043e V4.7 HF33 (SINAMICS SL150)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f: \n\u0414\u043b\u044f SIMATIC CFU PA \u0434\u043e V1.2.0:\nhttps://support.industry.siemens.com/cs/ww/en/view/109754628\n\n\u0414\u043b\u044f SIMATIC ET 200MP IM 155-5 PN BA \u0434\u043e V4.2.3:\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109754281\n\n\u0414\u043b\u044f SIMATIC ET 200SP IM 155-6 PN HF \u0434\u043e V4.2.2:\nhttps://support.industry.siemens.com/cs/ww/en/view/85624387\n\n\u0414\u043b\u044f SIMATIC ET 200SP IM 155-6 PN/2 HF \u0434\u043e V4.2.2:\nhttps://support.industry.siemens.com/cs/ww/en/view/109769765\n\n\u0414\u043b\u044f SIMATIC ET 200SP IM 155-6 PN/3 HF \u0434\u043e V4.2.1:\nhttps://support.industry.siemens.com/cs/ww/en/view/109769419\n\n\u0414\u043b\u044f SIMATIC PROFINET Driver \u0434\u043e V2.1:\nhttps://support.industry.siemens.com/cs/ww/en/view/109768047\n\n\u0414\u043b\u044f SIMATIC S7-400H V6 \u0434\u043e V6.0.9:\nhttps://support.industry.siemens.com/cs/ww/en/view/109474550\n\n\u0414\u043b\u044f SIMATIC WinAC RTX (F) 2010 \u0434\u043e SIMATIC WinAC RTX 2010 SP3:\nhttps://support.industry.siemens.com/cs/ww/en/view/109765109\n\n\u0414\u043b\u044f SINAMICS DCM \u0434\u043e V1.5 HF1:\nhttps://support.industry.siemens.com/cs/ww/en/view/44029688\n\n\u0414\u043b\u044f SINAMICS G110M \u0438 G120 V4.7 \u0434\u043e V4.7 SP10 HF5:\nhttps://support.industry.siemens.com/cs/ww/en/view/109756820\n\n\u0414\u043b\u044f SINAMICS GH150, GL150 \u0438 GM150 V4.7 \u0434\u043e V4.8 SP2 HF9:\n\u0414\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u0435\u0441\u044c \u0432 \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Siemens\n\n\u0414\u043b\u044f SINUMERIK 828D \u0434\u043e V4.8 SP5:\n\u0414\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u0435\u0441\u044c \u0432 \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Siemens\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b: \n\u041e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "08.10.2019",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "09.01.2020",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "25.11.2019",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2019-04219",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2019-10936, SSA-473245",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "SIMATIC ET 200ecoPN, SIMATIC ET 200M, SIMATIC ET 200pro, SIMATIC ET 200S, SINUMERIK 840D sl, SIMATIC HMI KTP Mobile Panels, SIMATIC ET 200AL, SIMATIC HMI Comfort Outdoor Panels 7\" and 15\", SIMATIC HMI Comfort 4 -22\" Panels, SIMATIC S7-400-H, SIMATIC S7-400 PN/DP V7 \u0432\u043a\u043b\u044e\u0447\u0430\u044f F, SIMATIC WinAC RTX 2010 incl. F, SINAMICS DCM, SINAMICS DCP, SINAMICS G110M, SINAMICS GH150, SINAMICS GL150, SINAMICS GM150, SINAMICS S110, SINAMICS SM120, SINUMERIK 828D, Development/Evaluation Kits for PROFINET IO DK Standard Ethernet Controller, Development/Evaluation Kits for PROFINET IO EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO EK-ERTEC 200P, SIMATIC CFU PA, SIMATIC ET 200MP IM155-5 PN BA, SIMATIC ET 200MP IM155-5 PN HF, SIMATIC ET 200MP IM155-5 PN ST, SIMATIC ET 200SP IM 155-6 PN BA, SIMATIC ET 200SP IM 155-6 PN HA, SIMATIC ET 200SP IM155-6 PN HF, SIMATIC ET 200SP IM155-6 PN ST, SIMATIC ET 200SP IM 155-6 PN/2 HF, SIMATIC ET 200SP IM 155-6 PN/3 HF, SIMATIC PN/PN Coupler, SIMATIC PROFINET Driver, SIMATIC S7-1200 \u0432\u043a\u043b\u044e\u0447\u0430\u044f F, SIMATIC S7-1500 CPU family (incl. F), SIMATIC S7-300 CPU family (incl. F), SIMATIC S7-400 \u0432\u043a\u043b\u044e\u0447\u0430\u044f F, SIMATIC S7-410, SINAMICS G150, SINAMICS S150, SIMATIC ET 200SP IM 155-6 PN HS, SINAMICS G130, SINAMICS S120, SINAMICS SL150",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Siemens, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 UDP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0440\u0430\u0441\u0445\u043e\u0434 \u0440\u0435\u0441\u0443\u0440\u0441\u0430 (\u00ab\u0418\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u00bb) (CWE-400)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Siemens \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 UDP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0418\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://nvd.nist.gov/vuln/detail/CVE-2019-10936\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0410\u0421\u0423 \u0422\u041f, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-400",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.