Heimdall Security Logo

CVE-2019-13945

Vulnérabilité non évaluée dans SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (Siemens AG)

CVSS 0.0 · Non évaluée
EPSS 0.5%
Siemens AG•SIMATIC S7-1200 CPU family (incl. SIPLUS variants)•Versions : All versions with Function State (FS) < 11, All versions <= V2.3.0 and Function State (FS) <= 3, All versions <= V2.5.0 and Function State (FS) <= 12, All versions <= V2.5.0 and Function State (FS) <= 8, All versions <= V2.2.2 and Function State (FS) <= 10, All versions <= V2.5.0 and Function State (FS) <= 11, All versions <= V2.2.2 and Function State (FS) <= 8, All versions, All versions <= V2.5.0 and Function State (FS) <= 10, All versions <= V2.5.0 and Function State (FS) <= 9

Description

A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-1200 CPU family < V4.x (incl. SIPLUS variants) (All versions), SIMATIC S7-1200 CPU family V4.x (incl. SIPLUS variants) (All versions with Function State (FS) < 11), SIMATIC S7-200 SMART CPU CR20s (6ES7 288-1CR20-0AA1) (All versions <= V2.3.0 and Function State (FS) <= 3), SIMATIC S7-200 SMART CPU CR30s (6ES7 288-1CR30-0AA1) (All versions <= V2.3.0 and Function State (FS) <= 3), SIMATIC S7-200 SMART CPU CR40 (6ES7 288-1CR40-0AA0) (All versions <= V2.2.2 and Function State (FS) <= 8), SIMATIC S7-200 SMART CPU CR40s (6ES7 288-1CR40-0AA1) (All versions <= V2.3.0 and Function State (FS) <= 3), SIMATIC S7-200 SMART CPU CR60 (6ES7 288-1CR60-0AA0) (All versions <= V2.2.2 and Function State (FS) <= 10), SIMATIC S7-200 SMART CPU CR60s (6ES7 288-1CR60-0AA1) (All versions <= V2.3.0 and Function State (FS) <= 3), SIMATIC S7-200 SMART CPU SR20 (6ES7 288-1SR20-0AA0) (All versions <= V2.5.0 and Function State (FS) <= 11), SIMATIC S7-200 SMART CPU SR30 (6ES7 288-1SR30-0AA0) (All versions <= V2.5.0 and Function State (FS) <= 10), SIMATIC S7-200 SMART CPU SR40 (6ES7 288-1SR40-0AA0) (All versions <= V2.5.0 and Function State (FS) <= 10), SIMATIC S7-200 SMART CPU SR60 (6ES7 288-1SR60-0AA0) (All versions <= V2.5.0 and Function State (FS) <= 12), SIMATIC S7-200 SMART CPU ST20 (6ES7 288-1ST20-0AA0) (All versions <= V2.5.0 and Function State (FS) <= 9), SIMATIC S7-200 SMART CPU ST30 (6ES7 288-1ST30-0AA0) (All versions <= V2.5.0 and Function State (FS) <= 9), SIMATIC S7-200 SMART CPU ST40 (6ES7 288-1ST40-0AA0) (All versions <= V2.5.0 and Function State (FS) <= 8), SIMATIC S7-200 SMART CPU ST60 (6ES7 288-1ST60-0AA0) (All versions <= V2.5.0 and Function State (FS) <= 8), SIMATIC S7-200 SMART CPU family (All versions). There is an access mode used during manufacturing of the affected devices that allows additional diagnostic functionality. The security vulnerability could be exploited by an attacker with physical access to the UART interface during boot process.

Gravité et risque d'exploitation

CVE-2019-13945 obtient un score CVSS de 0.0/10, soit une gravité non évaluée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.53 %, ce qui la place devant 43.5 % des CVE référencées.

Que faire ?

  • Vérifiez si SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (versions All versions with Function State (FS) < 11, All versions <= V2.3.0 and Function State (FS) <= 3, All versions <= V2.5.0 and Function State (FS) <= 12, All versions <= V2.5.0 and Function State (FS) <= 8, All versions <= V2.2.2 and Function State (FS) <= 10, All versions <= V2.5.0 and Function State (FS) <= 11, All versions <= V2.2.2 and Function State (FS) <= 8, All versions, All versions <= V2.5.0 and Function State (FS) <= 10, All versions <= V2.5.0 and Function State (FS) <= 9) est présent sur votre parc.
  • Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
  • À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
  • Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.

Références

Rechercher une autre CVE