Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-18320 (GCVE-0-2019-18320)
Vulnerability from cvelistv5 – Published: 2019-12-12 19:08 – Updated: 2024-08-05 01:54
VLAI?
EPSS
Summary
A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
Severity ?
No CVSS data available.
CWE
- CWE-287 - Improper Authentication
Assigner
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Siemens | SPPA-T3000 Application Server |
Affected:
All versions < Service Pack R8.2 SP2
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T01:54:14.044Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "SPPA-T3000 Application Server",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c Service Pack R8.2 SP2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in SPPA-T3000 Application Server (All versions \u003c Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287: Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-02-22T17:52:14",
"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"shortName": "siemens"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "productcert@siemens.com",
"ID": "CVE-2019-18320",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "SPPA-T3000 Application Server",
"version": {
"version_data": [
{
"version_value": "All versions \u003c Service Pack R8.2 SP2"
}
]
}
}
]
},
"vendor_name": "Siemens"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A vulnerability has been identified in SPPA-T3000 Application Server (All versions \u003c Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-287: Improper Authentication"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf",
"refsource": "MISC",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"assignerShortName": "siemens",
"cveId": "CVE-2019-18320",
"datePublished": "2019-12-12T19:08:48",
"dateReserved": "2019-10-23T00:00:00",
"dateUpdated": "2024-08-05T01:54:14.044Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:sppa-t3000_application_server:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"r8.2\", \"matchCriteriaId\": \"5CE233B0-3F20-4FA8-8E26-CCC3E21E49E1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"4EBA7673-3A24-4DF7-9D9C-4B863863083C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"D0975E8C-C34F-4BD2-B4CF-41E5FBFD8A12\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"A vulnerability has been identified in SPPA-T3000 Application Server (All versions \u003c Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.\"}, {\"lang\": \"es\", \"value\": \"Se ha identificado una vulnerabilidad en SPPA-T3000 Application Server (todas las versiones). Un atacante con acceso de red al Application Server podr\\u00eda cargar archivos arbitrarios sin autenticaci\\u00f3n. Tenga en cuenta que un atacante necesita tener acceso de red al Application Server a fin de explotar esta vulnerabilidad. Al momento de la publicaci\\u00f3n del aviso, no era conocida la explotaci\\u00f3n p\\u00fablica de esta vulnerabilidad de seguridad\"}]",
"id": "CVE-2019-18320",
"lastModified": "2024-11-21T04:33:02.503",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:P/A:N\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2019-12-12T19:15:18.607",
"references": "[{\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf\", \"source\": \"productcert@siemens.com\", \"tags\": [\"Mitigation\", \"Vendor Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mitigation\", \"Vendor Advisory\"]}]",
"sourceIdentifier": "productcert@siemens.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"productcert@siemens.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-287\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-434\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2019-18320\",\"sourceIdentifier\":\"productcert@siemens.com\",\"published\":\"2019-12-12T19:15:18.607\",\"lastModified\":\"2024-11-21T04:33:02.503\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability has been identified in SPPA-T3000 Application Server (All versions \u003c Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.\"},{\"lang\":\"es\",\"value\":\"Se ha identificado una vulnerabilidad en SPPA-T3000 Application Server (todas las versiones). Un atacante con acceso de red al Application Server podr\u00eda cargar archivos arbitrarios sin autenticaci\u00f3n. Tenga en cuenta que un atacante necesita tener acceso de red al Application Server a fin de explotar esta vulnerabilidad. Al momento de la publicaci\u00f3n del aviso, no era conocida la explotaci\u00f3n p\u00fablica de esta vulnerabilidad de seguridad\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:P/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-287\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-434\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:sppa-t3000_application_server:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"r8.2\",\"matchCriteriaId\":\"5CE233B0-3F20-4FA8-8E26-CCC3E21E49E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"4EBA7673-3A24-4DF7-9D9C-4B863863083C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0975E8C-C34F-4BD2-B4CF-41E5FBFD8A12\"}]}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf\",\"source\":\"productcert@siemens.com\",\"tags\":[\"Mitigation\",\"Vendor Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mitigation\",\"Vendor Advisory\"]}]}}"
}
}
CNVD-2019-44767
Vulnerability from cnvd - Published: 2019-12-11
VLAI Severity ?
Title
Siemens SPPA-T3000不当身份验证漏洞（CNVD-2019-44767）
Description
SPPA-T3000是一种分布式控制系统，主要应用于火力发电厂和大型可再生能源发电厂。
Siemens SPPA-T3000存在安全漏洞。对应用程序服务器具有网络访问权限的攻击者可以在不进行身份验证的情况下上载任意文件。
Severity
高
Patch Name
Siemens SPPA-T3000不当身份验证漏洞（CNVD-2019-44767）的补丁
Patch Description
SPPA-T3000是一种分布式控制系统，主要应用于火力发电厂和大型可再生能源发电厂。
Siemens SPPA-T3000存在安全漏洞。对应用程序服务器具有网络访问权限的攻击者可以在不进行身份验证的情况下上载任意文件。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
Reference
https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
Impacted products
| Name | Siemens SPPA-T3000 Application Server |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2019-18320"
}
},
"description": "SPPA-T3000\u662f\u4e00\u79cd\u5206\u5e03\u5f0f\u63a7\u5236\u7cfb\u7edf\uff0c\u4e3b\u8981\u5e94\u7528\u4e8e\u706b\u529b\u53d1\u7535\u5382\u548c\u5927\u578b\u53ef\u518d\u751f\u80fd\u6e90\u53d1\u7535\u5382\u3002\n\nSiemens SPPA-T3000\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u5bf9\u5e94\u7528\u7a0b\u5e8f\u670d\u52a1\u5668\u5177\u6709\u7f51\u7edc\u8bbf\u95ee\u6743\u9650\u7684\u653b\u51fb\u8005\u53ef\u4ee5\u5728\u4e0d\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\u7684\u60c5\u51b5\u4e0b\u4e0a\u8f7d\u4efb\u610f\u6587\u4ef6\u3002",
"formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2019-44767",
"openTime": "2019-12-11",
"patchDescription": "SPPA-T3000\u662f\u4e00\u79cd\u5206\u5e03\u5f0f\u63a7\u5236\u7cfb\u7edf\uff0c\u4e3b\u8981\u5e94\u7528\u4e8e\u706b\u529b\u53d1\u7535\u5382\u548c\u5927\u578b\u53ef\u518d\u751f\u80fd\u6e90\u53d1\u7535\u5382\u3002\r\n\r\nSiemens SPPA-T3000\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u5bf9\u5e94\u7528\u7a0b\u5e8f\u670d\u52a1\u5668\u5177\u6709\u7f51\u7edc\u8bbf\u95ee\u6743\u9650\u7684\u653b\u51fb\u8005\u53ef\u4ee5\u5728\u4e0d\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\u7684\u60c5\u51b5\u4e0b\u4e0a\u8f7d\u4efb\u610f\u6587\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Siemens SPPA-T3000\u4e0d\u5f53\u8eab\u4efd\u9a8c\u8bc1\u6f0f\u6d1e\uff08CNVD-2019-44767\uff09\u7684\u8865\u4e01",
"products": {
"product": "Siemens SPPA-T3000 Application Server"
},
"referenceLink": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf",
"serverity": "\u9ad8",
"submitTime": "2019-12-11",
"title": "Siemens SPPA-T3000\u4e0d\u5f53\u8eab\u4efd\u9a8c\u8bc1\u6f0f\u6d1e\uff08CNVD-2019-44767\uff09"
}
GSD-2019-18320
Vulnerability from gsd - Updated: 2023-12-13 01:23Details
A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2019-18320",
"description": "A vulnerability has been identified in SPPA-T3000 Application Server (All versions \u003c Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.",
"id": "GSD-2019-18320"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2019-18320"
],
"details": "A vulnerability has been identified in SPPA-T3000 Application Server (All versions \u003c Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.",
"id": "GSD-2019-18320",
"modified": "2023-12-13T01:23:50.219476Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "productcert@siemens.com",
"ID": "CVE-2019-18320",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "SPPA-T3000 Application Server",
"version": {
"version_data": [
{
"version_value": "All versions \u003c Service Pack R8.2 SP2"
}
]
}
}
]
},
"vendor_name": "Siemens"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A vulnerability has been identified in SPPA-T3000 Application Server (All versions \u003c Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-287: Improper Authentication"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf",
"refsource": "MISC",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:siemens:sppa-t3000_application_server:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "r8.2",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:-:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "productcert@siemens.com",
"ID": "CVE-2019-18320"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "A vulnerability has been identified in SPPA-T3000 Application Server (All versions \u003c Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "N/A",
"refsource": "CONFIRM",
"tags": [
"Mitigation",
"Vendor Advisory"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
},
"lastModifiedDate": "2022-03-04T20:49Z",
"publishedDate": "2019-12-12T19:15Z"
}
}
}
CERTFR-2019-AVI-615
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Siemens | N/A | SPPA-T3000 MS3000 Migration Server | ||
| Siemens | N/A | SiNVR 3 Central Control Server (CCS) | ||
| Siemens | N/A | SIMATIC S7-1200 CPU | ||
| Siemens | N/A | RUGGEDCOM ROS RSG9xx R/C | ||
| Siemens | N/A | RUGGEDCOM ROS RMC8388 | ||
| Siemens | N/A | EN100 Ethernet module Modbus TCP | ||
| Siemens | N/A | SIMATIC WinCC OA | ||
| Siemens | N/A | SIMATIC CP 1626 | ||
| Siemens | N/A | SCALANCE W700 versions antérieures à V6.4 | ||
| Siemens | N/A | SIMATIC NET PC | ||
| Siemens | N/A | SIMATIC WinCC Runtime Professional | ||
| Siemens | N/A | EN100 Ethernet module IEC 61850 versions antérieures à V4.37 | ||
| Siemens | N/A | SPPA-T3000 Application Server versions antérieures à Service Pack R8.2 SP1 | ||
| Siemens | N/A | SIMATIC WinCC Runtime Advanced | ||
| Siemens | N/A | RUGGEDCOM ROS RSL910 | ||
| Siemens | N/A | SIMATIC WinCC (TIA Portal) versions antérieures à V16 | ||
| Siemens | N/A | Famille de commutateurs SCALANCE X-200IRT et les variantes SIPLUSNET versions antérieures à V5.4.2 | ||
| Siemens | N/A | SIMATIC S7-200 SMART CPU | ||
| Siemens | N/A | SIMATIC WinCC OA versions antérieures à 3.16 patch version 13 | ||
| Siemens | N/A | SiNVR 3 Video Server | ||
| Siemens | N/A | EN100 Ethernet module DNP3 | ||
| Siemens | N/A | SCALANCE W1700 versions antérieures à V1.1 | ||
| Siemens | N/A | RUGGEDCOM ROS RSG2488 | ||
| Siemens | N/A | EN100 Ethernet module PROFINET IO | ||
| Siemens | N/A | EN100 Ethernet module IEC104 | ||
| Siemens | N/A | RUGGEDCOM ROS RSG920P | ||
| Siemens | N/A | TIM 1531 IRC | ||
| Siemens | N/A | XHQ versions antérieures à V6.0.0.2 | ||
| Siemens | N/A | SIMATIC STEP 7 (TIA Portal) versions antérieures à V16 | ||
| Siemens | N/A | RUGGEDCOM ROS RST2228 | ||
| Siemens | N/A | SIMATIC HMI Panel | ||
| Siemens | N/A | Famille de commutateurs SCALANCE X-200 et les variantes SIPLUSNET versions antérieures à V5.2.4 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "SPPA-T3000 MS3000 Migration Server",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SiNVR 3 Central Control Server (CCS)",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC S7-1200 CPU",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROS RSG9xx R/C",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROS RMC8388",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "EN100 Ethernet module Modbus TCP",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC OA",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 1626",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE W700 versions ant\u00e9rieures \u00e0 V6.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC NET PC",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Runtime Professional",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "EN100 Ethernet module IEC 61850 versions ant\u00e9rieures \u00e0 V4.37",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SPPA-T3000 Application Server versions ant\u00e9rieures \u00e0 Service Pack R8.2 SP1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Runtime Advanced",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROS RSL910",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC (TIA Portal) versions ant\u00e9rieures \u00e0 V16",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Famille de commutateurs SCALANCE X-200IRT et les variantes SIPLUSNET versions ant\u00e9rieures \u00e0 V5.4.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC S7-200 SMART CPU",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC OA versions ant\u00e9rieures \u00e0 3.16 patch version 13",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SiNVR 3 Video Server",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "EN100 Ethernet module DNP3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE W1700 versions ant\u00e9rieures \u00e0 V1.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROS RSG2488",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "EN100 Ethernet module PROFINET IO",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "EN100 Ethernet module IEC104",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROS RSG920P",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIM 1531 IRC",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "XHQ versions ant\u00e9rieures \u00e0 V6.0.0.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 (TIA Portal) versions ant\u00e9rieures \u00e0 V16",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROS RST2228",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC HMI Panel",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Famille de commutateurs SCALANCE X-200 et les variantes SIPLUSNET versions ant\u00e9rieures \u00e0 V5.2.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-13944",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13944"
},
{
"name": "CVE-2019-18339",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18339"
},
{
"name": "CVE-2019-18341",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18341"
},
{
"name": "CVE-2019-18332",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18332"
},
{
"name": "CVE-2019-18335",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18335"
},
{
"name": "CVE-2019-18338",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18338"
},
{
"name": "CVE-2018-14526",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14526"
},
{
"name": "CVE-2019-18319",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18319"
},
{
"name": "CVE-2019-18331",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18331"
},
{
"name": "CVE-2019-18312",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18312"
},
{
"name": "CVE-2019-18320",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18320"
},
{
"name": "CVE-2019-18322",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18322"
},
{
"name": "CVE-2019-18283",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18283"
},
{
"name": "CVE-2019-18303",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18303"
},
{
"name": "CVE-2019-18302",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18302"
},
{
"name": "CVE-2019-18311",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18311"
},
{
"name": "CVE-2019-18290",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18290"
},
{
"name": "CVE-2019-18292",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18292"
},
{
"name": "CVE-2019-18309",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18309"
},
{
"name": "CVE-2019-18291",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18291"
},
{
"name": "CVE-2019-18304",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18304"
},
{
"name": "CVE-2019-18326",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18326"
},
{
"name": "CVE-2019-18305",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18305"
},
{
"name": "CVE-2019-18318",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18318"
},
{
"name": "CVE-2013-3634",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-3634"
},
{
"name": "CVE-2019-18334",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18334"
},
{
"name": "CVE-2019-18299",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18299"
},
{
"name": "CVE-2019-13932",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13932"
},
{
"name": "CVE-2019-18316",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18316"
},
{
"name": "CVE-2019-18329",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18329"
},
{
"name": "CVE-2019-10929",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-10929"
},
{
"name": "CVE-2019-13931",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13931"
},
{
"name": "CVE-2019-18333",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18333"
},
{
"name": "CVE-2019-18300",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18300"
},
{
"name": "CVE-2019-18301",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18301"
},
{
"name": "CVE-2019-18328",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18328"
},
{
"name": "CVE-2019-18321",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18321"
},
{
"name": "CVE-2019-13947",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13947"
},
{
"name": "CVE-2019-18317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18317"
},
{
"name": "CVE-2019-18294",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18294"
},
{
"name": "CVE-2019-13943",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13943"
},
{
"name": "CVE-2019-18330",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18330"
},
{
"name": "CVE-2019-18314",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18314"
},
{
"name": "CVE-2019-18307",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18307"
},
{
"name": "CVE-2019-13945",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13945"
},
{
"name": "CVE-2019-18308",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18308"
},
{
"name": "CVE-2013-3633",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-3633"
},
{
"name": "CVE-2019-18306",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18306"
},
{
"name": "CVE-2019-18340",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18340"
},
{
"name": "CVE-2019-18342",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18342"
},
{
"name": "CVE-2019-18325",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18325"
},
{
"name": "CVE-2018-4832",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4832"
},
{
"name": "CVE-2019-18310",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18310"
},
{
"name": "CVE-2019-13103",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13103"
},
{
"name": "CVE-2019-13930",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13930"
},
{
"name": "CVE-2019-18337",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18337"
},
{
"name": "CVE-2019-18323",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18323"
},
{
"name": "CVE-2019-18327",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18327"
},
{
"name": "CVE-2018-18440",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18440"
},
{
"name": "CVE-2019-18315",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18315"
},
{
"name": "CVE-2019-18298",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18298"
},
{
"name": "CVE-2019-13942",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13942"
},
{
"name": "CVE-2019-18313",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18313"
},
{
"name": "CVE-2019-18324",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18324"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-615",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-12-10T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSiemens. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-451445 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-418979 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-418979.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-170686 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-170686.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-344983 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-344983.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-761617 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-618620 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-618620.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-525454 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-525454.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-686531 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-686531.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-273799 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-273799.pdf"
}
]
}
CERTFR-2019-AVI-615
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Siemens | N/A | SPPA-T3000 MS3000 Migration Server | ||
| Siemens | N/A | SiNVR 3 Central Control Server (CCS) | ||
| Siemens | N/A | SIMATIC S7-1200 CPU | ||
| Siemens | N/A | RUGGEDCOM ROS RSG9xx R/C | ||
| Siemens | N/A | RUGGEDCOM ROS RMC8388 | ||
| Siemens | N/A | EN100 Ethernet module Modbus TCP | ||
| Siemens | N/A | SIMATIC WinCC OA | ||
| Siemens | N/A | SIMATIC CP 1626 | ||
| Siemens | N/A | SCALANCE W700 versions antérieures à V6.4 | ||
| Siemens | N/A | SIMATIC NET PC | ||
| Siemens | N/A | SIMATIC WinCC Runtime Professional | ||
| Siemens | N/A | EN100 Ethernet module IEC 61850 versions antérieures à V4.37 | ||
| Siemens | N/A | SPPA-T3000 Application Server versions antérieures à Service Pack R8.2 SP1 | ||
| Siemens | N/A | SIMATIC WinCC Runtime Advanced | ||
| Siemens | N/A | RUGGEDCOM ROS RSL910 | ||
| Siemens | N/A | SIMATIC WinCC (TIA Portal) versions antérieures à V16 | ||
| Siemens | N/A | Famille de commutateurs SCALANCE X-200IRT et les variantes SIPLUSNET versions antérieures à V5.4.2 | ||
| Siemens | N/A | SIMATIC S7-200 SMART CPU | ||
| Siemens | N/A | SIMATIC WinCC OA versions antérieures à 3.16 patch version 13 | ||
| Siemens | N/A | SiNVR 3 Video Server | ||
| Siemens | N/A | EN100 Ethernet module DNP3 | ||
| Siemens | N/A | SCALANCE W1700 versions antérieures à V1.1 | ||
| Siemens | N/A | RUGGEDCOM ROS RSG2488 | ||
| Siemens | N/A | EN100 Ethernet module PROFINET IO | ||
| Siemens | N/A | EN100 Ethernet module IEC104 | ||
| Siemens | N/A | RUGGEDCOM ROS RSG920P | ||
| Siemens | N/A | TIM 1531 IRC | ||
| Siemens | N/A | XHQ versions antérieures à V6.0.0.2 | ||
| Siemens | N/A | SIMATIC STEP 7 (TIA Portal) versions antérieures à V16 | ||
| Siemens | N/A | RUGGEDCOM ROS RST2228 | ||
| Siemens | N/A | SIMATIC HMI Panel | ||
| Siemens | N/A | Famille de commutateurs SCALANCE X-200 et les variantes SIPLUSNET versions antérieures à V5.2.4 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "SPPA-T3000 MS3000 Migration Server",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SiNVR 3 Central Control Server (CCS)",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC S7-1200 CPU",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROS RSG9xx R/C",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROS RMC8388",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "EN100 Ethernet module Modbus TCP",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC OA",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 1626",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE W700 versions ant\u00e9rieures \u00e0 V6.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC NET PC",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Runtime Professional",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "EN100 Ethernet module IEC 61850 versions ant\u00e9rieures \u00e0 V4.37",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SPPA-T3000 Application Server versions ant\u00e9rieures \u00e0 Service Pack R8.2 SP1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Runtime Advanced",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROS RSL910",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC (TIA Portal) versions ant\u00e9rieures \u00e0 V16",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Famille de commutateurs SCALANCE X-200IRT et les variantes SIPLUSNET versions ant\u00e9rieures \u00e0 V5.4.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC S7-200 SMART CPU",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC OA versions ant\u00e9rieures \u00e0 3.16 patch version 13",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SiNVR 3 Video Server",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "EN100 Ethernet module DNP3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE W1700 versions ant\u00e9rieures \u00e0 V1.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROS RSG2488",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "EN100 Ethernet module PROFINET IO",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "EN100 Ethernet module IEC104",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROS RSG920P",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIM 1531 IRC",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "XHQ versions ant\u00e9rieures \u00e0 V6.0.0.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 (TIA Portal) versions ant\u00e9rieures \u00e0 V16",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROS RST2228",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC HMI Panel",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Famille de commutateurs SCALANCE X-200 et les variantes SIPLUSNET versions ant\u00e9rieures \u00e0 V5.2.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-13944",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13944"
},
{
"name": "CVE-2019-18339",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18339"
},
{
"name": "CVE-2019-18341",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18341"
},
{
"name": "CVE-2019-18332",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18332"
},
{
"name": "CVE-2019-18335",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18335"
},
{
"name": "CVE-2019-18338",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18338"
},
{
"name": "CVE-2018-14526",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14526"
},
{
"name": "CVE-2019-18319",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18319"
},
{
"name": "CVE-2019-18331",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18331"
},
{
"name": "CVE-2019-18312",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18312"
},
{
"name": "CVE-2019-18320",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18320"
},
{
"name": "CVE-2019-18322",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18322"
},
{
"name": "CVE-2019-18283",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18283"
},
{
"name": "CVE-2019-18303",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18303"
},
{
"name": "CVE-2019-18302",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18302"
},
{
"name": "CVE-2019-18311",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18311"
},
{
"name": "CVE-2019-18290",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18290"
},
{
"name": "CVE-2019-18292",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18292"
},
{
"name": "CVE-2019-18309",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18309"
},
{
"name": "CVE-2019-18291",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18291"
},
{
"name": "CVE-2019-18304",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18304"
},
{
"name": "CVE-2019-18326",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18326"
},
{
"name": "CVE-2019-18305",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18305"
},
{
"name": "CVE-2019-18318",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18318"
},
{
"name": "CVE-2013-3634",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-3634"
},
{
"name": "CVE-2019-18334",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18334"
},
{
"name": "CVE-2019-18299",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18299"
},
{
"name": "CVE-2019-13932",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13932"
},
{
"name": "CVE-2019-18316",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18316"
},
{
"name": "CVE-2019-18329",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18329"
},
{
"name": "CVE-2019-10929",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-10929"
},
{
"name": "CVE-2019-13931",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13931"
},
{
"name": "CVE-2019-18333",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18333"
},
{
"name": "CVE-2019-18300",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18300"
},
{
"name": "CVE-2019-18301",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18301"
},
{
"name": "CVE-2019-18328",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18328"
},
{
"name": "CVE-2019-18321",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18321"
},
{
"name": "CVE-2019-13947",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13947"
},
{
"name": "CVE-2019-18317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18317"
},
{
"name": "CVE-2019-18294",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18294"
},
{
"name": "CVE-2019-13943",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13943"
},
{
"name": "CVE-2019-18330",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18330"
},
{
"name": "CVE-2019-18314",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18314"
},
{
"name": "CVE-2019-18307",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18307"
},
{
"name": "CVE-2019-13945",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13945"
},
{
"name": "CVE-2019-18308",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18308"
},
{
"name": "CVE-2013-3633",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-3633"
},
{
"name": "CVE-2019-18306",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18306"
},
{
"name": "CVE-2019-18340",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18340"
},
{
"name": "CVE-2019-18342",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18342"
},
{
"name": "CVE-2019-18325",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18325"
},
{
"name": "CVE-2018-4832",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4832"
},
{
"name": "CVE-2019-18310",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18310"
},
{
"name": "CVE-2019-13103",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13103"
},
{
"name": "CVE-2019-13930",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13930"
},
{
"name": "CVE-2019-18337",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18337"
},
{
"name": "CVE-2019-18323",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18323"
},
{
"name": "CVE-2019-18327",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18327"
},
{
"name": "CVE-2018-18440",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18440"
},
{
"name": "CVE-2019-18315",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18315"
},
{
"name": "CVE-2019-18298",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18298"
},
{
"name": "CVE-2019-13942",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13942"
},
{
"name": "CVE-2019-18313",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18313"
},
{
"name": "CVE-2019-18324",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18324"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-615",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-12-10T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSiemens. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-451445 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-418979 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-418979.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-170686 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-170686.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-344983 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-344983.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-761617 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-618620 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-618620.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-525454 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-525454.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-686531 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-686531.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-273799 du 10 d\u00e9cembre 2019",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-273799.pdf"
}
]
}
ICSA-19-351-02
Vulnerability from csaf_cisa - Published: 2019-12-10 00:00 - Updated: 2025-05-06 06:00Summary
Siemens SPPA-T3000 (Update A)
Notes
Summary
SPPA-T3000 Application Server and MS3000 Migration Server are affected by multiple vulnerabilities. Some of the vulnerabilities can allow an attacker to execute arbitrary code on the server. Exploitation of the vulnerabilities described in this advisory requires access to either Application- or Automation Highway. Both highways should not be exposed if the environment has been set up according to the recommended system configuration in the SPPA-T3000 security manual.
In this case Siemens Energy considers the environmental score as CR:L/IR:L/AR:H/MAV:A for vulnerabilities related to the Application Server and CR:L/IR:L/AR:M/MAV:A for vulnerabilities related to the Migration Server.
Siemens Energy provides a service pack to fix vulnerabilities on the Application Server and recommends configurations to mitigate the vulnerabilities in the Migration Server. Detailed information will be available for SPPA-T3000 customers in the Siemens Energy Customer Portal (https://cep.siemens-energy.com/).
General Recommendations
Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid's reliability can thus be minimized by virtue of the grid design.
Siemens Energy strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens Energy strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.
As a general security measure Siemens Energy strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Advisory Conversion Disclaimer
This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.
Critical infrastructure sectors
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
Recommended Practices
Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.
Recommended Practices
Locate control system networks and remote devices behind firewalls and isolate them from business networks.
Recommended Practices
When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
{
"document": {
"acknowledgments": [
{
"names": [
"Vyacheslav Moskvin",
"Ivan B"
],
"organization": "Positive Technologies",
"summary": "coordinated disclosure of CVE-2019-18314 to CVE-2019-18330"
},
{
"names": [
"Gleb Gritsai",
"Eugenie Potseluevskaya",
"Sergey Andreev",
"Radu Motspan"
],
"organization": "Kaspersky Lab",
"summary": "coordinated disclosure of CVE-2018-4832 and CVE-2019-18283 to CVE-2019-18313"
},
{
"names": [
"Can Demirel"
],
"organization": "Biznet Bili\u015fim",
"summary": "coordinated disclosure of CVE-2019-18331 to CVE-2019-18335"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"notes": [
{
"category": "summary",
"text": "SPPA-T3000 Application Server and MS3000 Migration Server are affected by multiple vulnerabilities. Some of the vulnerabilities can allow an attacker to execute arbitrary code on the server. Exploitation of the vulnerabilities described in this advisory requires access to either Application- or Automation Highway. Both highways should not be exposed if the environment has been set up according to the recommended system configuration in the SPPA-T3000 security manual.\n\nIn this case Siemens Energy considers the environmental score as CR:L/IR:L/AR:H/MAV:A for vulnerabilities related to the Application Server and CR:L/IR:L/AR:M/MAV:A for vulnerabilities related to the Migration Server.\n\nSiemens Energy provides a service pack to fix vulnerabilities on the Application Server and recommends configurations to mitigate the vulnerabilities in the Migration Server. Detailed information will be available for SPPA-T3000 customers in the Siemens Energy Customer Portal (https://cep.siemens-energy.com/).",
"title": "Summary"
},
{
"category": "general",
"text": "Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid\u0027s reliability can thus be minimized by virtue of the grid design.\n\nSiemens Energy strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens Energy strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.\n\nAs a general security measure Siemens Energy strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
"title": "Terms of Use"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "other",
"text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.",
"title": "Advisory Conversion Disclaimer"
},
{
"category": "other",
"text": "Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Germany",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "other",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "SSA-451445: Multiple Vulnerabilities in SPPA-T3000 - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-451445.json"
},
{
"category": "self",
"summary": "SSA-451445: Multiple Vulnerabilities in SPPA-T3000 - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/ssa-451445.txt"
},
{
"category": "self",
"summary": "SSA-451445: Multiple Vulnerabilities in SPPA-T3000 - PDF Version",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-19-351-02 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-351-02.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-19-351-02 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-351-02"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "Siemens SPPA-T3000 (Update A)",
"tracking": {
"current_release_date": "2025-05-06T06:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-19-351-02",
"initial_release_date": "2019-12-10T00:00:00.000000Z",
"revision_history": [
{
"date": "2019-12-10T00:00:00.000000Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
},
{
"date": "2020-03-10T00:00:00.000000Z",
"legacy_version": "1.1",
"number": "2",
"summary": "Added updates and configuration recommendations"
},
{
"date": "2022-02-17T00:00:00.000000Z",
"legacy_version": "1.2",
"number": "3",
"summary": "Editorial changes, assigned to Siemens Energy"
},
{
"date": "2025-05-06T06:00:00.000000Z",
"legacy_version": "Revision",
"number": "4",
"summary": "Revision - Fixing typos"
}
],
"status": "final",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cService_Pack_R8.2_SP2",
"product": {
"name": "SPPA-T3000 Application Server",
"product_id": "CSAFPID-0001"
}
}
],
"category": "product_name",
"name": "SPPA-T3000 Application Server"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SPPA-T3000 MS3000 Migration Server",
"product_id": "CSAFPID-0002"
}
}
],
"category": "product_name",
"name": "SPPA-T3000 MS3000 Migration Server"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-4832",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Specially crafted messages sent to the RPC service of the affected products could cause a Denial-of-Service condition on the remote and local communication functionality of the affected products. A reboot of the system is required to recover the remote and local communication functionality.\n\nPlease note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2018-4832 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2018-4832.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2018-4832"
},
{
"cve": "CVE-2019-18283",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "summary",
"text": "The AdminService is available without authentication on the Application Server. An attacker can gain remote code execution by sending specifically crafted objects to one of its functions.\n\nPlease note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18283 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18283.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18283"
},
{
"cve": "CVE-2019-18284",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "The AdminService is available without authentication on the Application Server. An attacker can use methods exposed via this interface to receive password hashes of other users and to change user passwords.\n\nPlease note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18284 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18284.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18284"
},
{
"cve": "CVE-2019-18285",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "summary",
"text": "The RMI communication between the client and the Application Server is unencrypted. An attacker with access to the communication channel can read credentials of a valid user.\n\nPlease note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18285 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18285.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18285"
},
{
"cve": "CVE-2019-18286",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "The Application Server exposes directory listings and files containing sensitive information.\n\nThis vulnerability is independent from CVE-2019-18287.\n\nPlease note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18286 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18286.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18286"
},
{
"cve": "CVE-2019-18287",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "The Application Server exposes directory listings and files containing sensitive information.\n\nThis vulnerability is independent from CVE-2019-18286.\n\nPlease note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18287 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18287.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18287"
},
{
"cve": "CVE-2019-18288",
"cwe": {
"id": "CWE-434",
"name": "Unrestricted Upload of File with Dangerous Type"
},
"notes": [
{
"category": "summary",
"text": "An attacker with valid authentication at the RMI interface could be able to gain remote code execution through an unsecured file upload.\n\nPlease note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18288 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18288.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18288"
},
{
"cve": "CVE-2019-18289",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18293, CVE-2019-18295, and CVE-2019-18296.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18289 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18289.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18289"
},
{
"cve": "CVE-2019-18290",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18290 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18290.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18290"
},
{
"cve": "CVE-2019-18291",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18290, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18291 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18291.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18291"
},
{
"cve": "CVE-2019-18292",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18292 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18292.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18292"
},
{
"cve": "CVE-2019-18293",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18289, CVE-2019-18295, and CVE-2019-18296.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18293 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18293.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18293"
},
{
"cve": "CVE-2019-18294",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18294 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18294.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18294"
},
{
"cve": "CVE-2019-18295",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18289, CVE-2019-18293, and CVE-2019-18296.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18295 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18295.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18295"
},
{
"cve": "CVE-2019-18296",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18289, CVE-2019-18293, and CVE-2019-18295.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18296 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18296.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18296"
},
{
"cve": "CVE-2019-18297",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with local access to the MS3000 Server and low privileges could gain root privileges by sending specifically crafted packets to a named pipe.\n\nPlease note that an attacker needs to have local access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18297 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18297.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18297"
},
{
"cve": "CVE-2019-18298",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18298 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18298.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18298"
},
{
"cve": "CVE-2019-18299",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18299 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18299.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18299"
},
{
"cve": "CVE-2019-18300",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18300 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18300.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18300"
},
{
"cve": "CVE-2019-18301",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18301 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18301.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18301"
},
{
"cve": "CVE-2019-18302",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18302 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18302.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18302"
},
{
"cve": "CVE-2019-18303",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18303 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18303.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18303"
},
{
"cve": "CVE-2019-18304",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18304 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18304.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18304"
},
{
"cve": "CVE-2019-18305",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18306, and CVE-2019-18307.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18305 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18305.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18305"
},
{
"cve": "CVE-2019-18306",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, and CVE-2019-18307.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18306 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18306.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18306"
},
{
"cve": "CVE-2019-18307",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, and CVE-2019-18306.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18307 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18307.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18307"
},
{
"cve": "CVE-2019-18308",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "summary",
"text": "An attacker with local access to the MS3000 Server and a low privileged user account could gain root privileges by manipulating specific files in the local file system.\n\nThis vulnerability is independent from CVE-2019-18309.\n\nPlease note that an attacker needs to have local access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18308 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18308.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18308"
},
{
"cve": "CVE-2019-18309",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "summary",
"text": "An attacker with local access to the MS3000 Server and a low privileged user account could gain root privileges by manipulating specific files in the local file system.\n\nThis vulnerability is independent from CVE-2019-18308.\n\nPlease note that an attacker needs to have local access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18309 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18309.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18309"
},
{
"cve": "CVE-2019-18310",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 7061/tcp.\n\nThis vulnerability is independent from CVE-2019-18311.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18310 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18310.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18310"
},
{
"cve": "CVE-2019-18311",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 7061/tcp.\n\nThis vulnerability is independent from CVE-2019-18310.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18311 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18311.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18311"
},
{
"cve": "CVE-2019-18312",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could be able to enumerate running RPC services.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18312 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18312.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18312"
},
{
"cve": "CVE-2019-18313",
"cwe": {
"id": "CWE-434",
"name": "Unrestricted Upload of File with Dangerous Type"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could gain remote code execution by sending specifically crafted objects to one of the RPC services.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18313 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18313.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18313"
},
{
"cve": "CVE-2019-18314",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the Application Server could gain remote code execution by sending specifically crafted objects via RMI.\n\nPlease note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18314 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18314.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18314"
},
{
"cve": "CVE-2019-18315",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the Application Server could gain remote code execution by sending specifically crafted packets to 8888/tcp.\n\nPlease note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18315 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18315.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18315"
},
{
"cve": "CVE-2019-18316",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the Application Server could gain remote code execution by sending specifically crafted packets to 1099/tcp.\n\nPlease note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18316 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18316.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18316"
},
{
"cve": "CVE-2019-18317",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the Application Server could cause a Denial-of-Service condition by sending specifically crafted objects via RMI.\n\nThis vulnerability is independent from CVE-2019-18318 and CVE-2019-18319.\n\nPlease note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18317 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18317.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18317"
},
{
"cve": "CVE-2019-18318",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the Application Server can cause a Denial-of-Service condition by sending specifically crafted objects via RMI.\n\nThis vulnerability is independent from CVE-2019-18317 and CVE-2019-18319.\n\nPlease note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18318 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18318.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18318"
},
{
"cve": "CVE-2019-18319",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the Application Server could cause a Denial-of-Service condition by sending specifically crafted objects via RMI.\n\nThis vulnerability is independent from CVE-2019-18317 and CVE-2019-18318.\n\nPlease note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18319 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18319.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18319"
},
{
"cve": "CVE-2019-18320",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the Application Server could be able to upload arbitrary files without authentication.\n\nPlease note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18320 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18320.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18320"
},
{
"cve": "CVE-2019-18321",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could be able to read and write arbitrary files on the local file system by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18322.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18321 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18321.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18321"
},
{
"cve": "CVE-2019-18322",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could be able to read and write arbitrary files on the local file system by sending specifically crafted packets to port 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18321.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18322 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18322.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18322"
},
{
"cve": "CVE-2019-18323",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18323 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18323.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18323"
},
{
"cve": "CVE-2019-18324",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18323, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18324 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18324.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18324"
},
{
"cve": "CVE-2019-18325",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18325 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18325.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18325"
},
{
"cve": "CVE-2019-18326",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18327, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18326 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18326.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18326"
},
{
"cve": "CVE-2019-18327",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18327 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18327.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18327"
},
{
"cve": "CVE-2019-18328",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18329, and CVE-2019-18330.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18328 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18328.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18328"
},
{
"cve": "CVE-2019-18329",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, and CVE-2019-18330.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18329 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18329.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18329"
},
{
"cve": "CVE-2019-18330",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the MS3000 Server could cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp.\n\nThis vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, and CVE-2019-18329.\n\nPlease note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2019-18330 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18330.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Apply released configuration specifications for SPPA-T3000 MS3000 available with Service Pack R8.2 SP2 to mitigate these vulnerabilities.",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0002"
]
}
],
"title": "CVE-2019-18330"
},
{
"cve": "CVE-2019-18331",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the Application Server could gain access to path and filenames on the server by sending specifically crafted packets to 1099/tcp.\n\nPlease note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18331 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18331.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18331"
},
{
"cve": "CVE-2019-18332",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the Application Server could gain access to directory listings of the server by sending specifically crafted packets to 80/tcp, 8095/tcp or 8080/tcp.\n\nPlease note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18332 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18332.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18332"
},
{
"cve": "CVE-2019-18333",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the Application Server could gain access to filenames on the server by sending specifically crafted packets to 8090/tcp.\n\nPlease note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18333 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18333.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18333"
},
{
"cve": "CVE-2019-18334",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the Application Server could be able to enumerate valid user names by sending specifically crafted packets to 8090/tcp.\n\nPlease note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18334 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18334.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18334"
},
{
"cve": "CVE-2019-18335",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "An attacker with network access to the Application Server could be able to gain access to logs and configuration files by sending specifically crafted packets to 80/tcp.\n\nPlease note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security vulnerability was known.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"summary": "CVE-2019-18335 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2019-18335.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations described in the SPPA-T3000 security manual",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Restrict access to the Application Highway using the SPPA-T3000 Firewall",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Perform regular updates of the SPPA-T3000 (e.g. by using the Security Server if available)",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Implement mitigations provided in the customer information letter distributed via the customer service portal",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Please contact your local Siemens Energy representative if you need help at securing your SPPA-T3000 installation",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2019-18335"
}
]
}
VAR-201912-1286
Vulnerability from variot - Updated: 2023-12-18 11:59A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. SPPA-T3000 is a distributed control system mainly used in thermal power plants and large renewable energy power plants.
There is a security vulnerability in the Siemens SPPA-T3000
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201912-1286",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sppa-t3000 application server",
"scope": null,
"trust": 1.4,
"vendor": "siemens",
"version": null
},
{
"model": "sppa-t3000 application server",
"scope": "eq",
"trust": 1.0,
"vendor": "siemens",
"version": "r8.2"
},
{
"model": "sppa-t3000 application server",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "r8.2"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "sppa t3000 application server",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "7913a294-b41f-4f21-81c7-117d53d033c6"
},
{
"db": "CNVD",
"id": "CNVD-2019-44767"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013102"
},
{
"db": "NVD",
"id": "CVE-2019-18320"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:siemens:sppa-t3000_application_server:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "r8.2",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:-:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2019-18320"
}
]
},
"cve": "CVE-2019-18320",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.0,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2019-18320",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CNVD-2019-44767",
"impactScore": 6.9,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:C/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "7913a294-b41f-4f21-81c7-117d53d033c6",
"impactScore": 6.9,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:C/A:N",
"version": "2.9 [IVD]"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2019-18320",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2019-18320",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CNVD",
"id": "CNVD-2019-44767",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201912-636",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "IVD",
"id": "7913a294-b41f-4f21-81c7-117d53d033c6",
"trust": 0.2,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "7913a294-b41f-4f21-81c7-117d53d033c6"
},
{
"db": "CNVD",
"id": "CNVD-2019-44767"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013102"
},
{
"db": "NVD",
"id": "CVE-2019-18320"
},
{
"db": "CNNVD",
"id": "CNNVD-201912-636"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A vulnerability has been identified in SPPA-T3000 Application Server (All versions \u003c Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. SPPA-T3000 is a distributed control system mainly used in thermal power plants and large renewable energy power plants. \n\nThere is a security vulnerability in the Siemens SPPA-T3000",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-18320"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013102"
},
{
"db": "CNVD",
"id": "CNVD-2019-44767"
},
{
"db": "IVD",
"id": "7913a294-b41f-4f21-81c7-117d53d033c6"
}
],
"trust": 2.34
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-18320",
"trust": 3.2
},
{
"db": "SIEMENS",
"id": "SSA-451445",
"trust": 2.2
},
{
"db": "ICS CERT",
"id": "ICSA-19-351-02",
"trust": 1.4
},
{
"db": "CNVD",
"id": "CNVD-2019-44767",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201912-636",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013102",
"trust": 0.8
},
{
"db": "AUSCERT",
"id": "ESB-2019.4705",
"trust": 0.6
},
{
"db": "IVD",
"id": "7913A294-B41F-4F21-81C7-117D53D033C6",
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "7913a294-b41f-4f21-81c7-117d53d033c6"
},
{
"db": "CNVD",
"id": "CNVD-2019-44767"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013102"
},
{
"db": "NVD",
"id": "CVE-2019-18320"
},
{
"db": "CNNVD",
"id": "CNNVD-201912-636"
}
]
},
"id": "VAR-201912-1286",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "7913a294-b41f-4f21-81c7-117d53d033c6"
},
{
"db": "CNVD",
"id": "CNVD-2019-44767"
}
],
"trust": 1.4666667
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "7913a294-b41f-4f21-81c7-117d53d033c6"
},
{
"db": "CNVD",
"id": "CNVD-2019-44767"
}
]
},
"last_update_date": "2023-12-18T11:59:07.846000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "SSA-451445",
"trust": 0.8,
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
},
{
"title": "Patch for Siemens SPPA-T3000 Improper Authentication Vulnerability (CNVD-2019-44767)",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/193761"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-44767"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013102"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-434",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-013102"
},
{
"db": "NVD",
"id": "CVE-2019-18320"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.2,
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
},
{
"trust": 1.4,
"url": "https://www.us-cert.gov/ics/advisories/icsa-19-351-02"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-18320"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-18320"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2019.4705/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-44767"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013102"
},
{
"db": "NVD",
"id": "CVE-2019-18320"
},
{
"db": "CNNVD",
"id": "CNNVD-201912-636"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "7913a294-b41f-4f21-81c7-117d53d033c6"
},
{
"db": "CNVD",
"id": "CNVD-2019-44767"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-013102"
},
{
"db": "NVD",
"id": "CVE-2019-18320"
},
{
"db": "CNNVD",
"id": "CNNVD-201912-636"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-12-11T00:00:00",
"db": "IVD",
"id": "7913a294-b41f-4f21-81c7-117d53d033c6"
},
{
"date": "2019-12-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-44767"
},
{
"date": "2019-12-19T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-013102"
},
{
"date": "2019-12-12T19:15:18.607000",
"db": "NVD",
"id": "CVE-2019-18320"
},
{
"date": "2019-12-12T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201912-636"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-12-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-44767"
},
{
"date": "2019-12-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-013102"
},
{
"date": "2022-03-04T20:49:41.263000",
"db": "NVD",
"id": "CVE-2019-18320"
},
{
"date": "2022-02-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201912-636"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201912-636"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "SPPA-T3000 Application Server Vulnerable to unlimited upload of dangerous types of files",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-013102"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "code problem",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201912-636"
}
],
"trust": 0.6
}
}
GHSA-RWPV-9HW4-GQ63
Vulnerability from github – Published: 2022-05-24 17:03 – Updated: 2022-05-24 17:03
VLAI?
Details
A vulnerability has been identified in SPPA-T3000 Application Server (All versions). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
{
"affected": [],
"aliases": [
"CVE-2019-18320"
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2019-12-12T19:15:00Z",
"severity": "MODERATE"
},
"details": "A vulnerability has been identified in SPPA-T3000 Application Server (All versions). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.",
"id": "GHSA-rwpv-9hw4-gq63",
"modified": "2022-05-24T17:03:27Z",
"published": "2022-05-24T17:03:27Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18320"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
}
],
"schema_version": "1.4.0",
"severity": []
}
FKIE_CVE-2019-18320
Vulnerability from fkie_nvd - Published: 2019-12-12 19:15 - Updated: 2024-11-21 04:33
Severity ?
Summary
A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
References
| URL | Tags | ||
|---|---|---|---|
| productcert@siemens.com | https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf | Mitigation, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf | Mitigation, Vendor Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| siemens | sppa-t3000_application_server | * | |
| siemens | sppa-t3000_application_server | r8.2 | |
| siemens | sppa-t3000_application_server | r8.2 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:siemens:sppa-t3000_application_server:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5CE233B0-3F20-4FA8-8E26-CCC3E21E49E1",
"versionEndExcluding": "r8.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:-:*:*:*:*:*:*",
"matchCriteriaId": "4EBA7673-3A24-4DF7-9D9C-4B863863083C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:sp1:*:*:*:*:*:*",
"matchCriteriaId": "D0975E8C-C34F-4BD2-B4CF-41E5FBFD8A12",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in SPPA-T3000 Application Server (All versions \u003c Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known."
},
{
"lang": "es",
"value": "Se ha identificado una vulnerabilidad en SPPA-T3000 Application Server (todas las versiones). Un atacante con acceso de red al Application Server podr\u00eda cargar archivos arbitrarios sin autenticaci\u00f3n. Tenga en cuenta que un atacante necesita tener acceso de red al Application Server a fin de explotar esta vulnerabilidad. Al momento de la publicaci\u00f3n del aviso, no era conocida la explotaci\u00f3n p\u00fablica de esta vulnerabilidad de seguridad"
}
],
"id": "CVE-2019-18320",
"lastModified": "2024-11-21T04:33:02.503",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2019-12-12T19:15:18.607",
"references": [
{
"source": "productcert@siemens.com",
"tags": [
"Mitigation",
"Vendor Advisory"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mitigation",
"Vendor Advisory"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
}
],
"sourceIdentifier": "productcert@siemens.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-287"
}
],
"source": "productcert@siemens.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-434"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…