Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Viva CRT-D, Brava CRT-D, Mirro MRI ICD Problem Types: CWE-319 Description: The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement encryption. An attacker with adjacent short-range access to a target product can listen to communications, including the transmission of sensitive data. Additional Analyst Notes: - CV
arget product can listen to communications, including the transmission of sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-19-080-01 - http://www.securityfocus.com/bid/107544
CVE ID: CVE-2019-6541 State: PUBLISHED Published: 2019-02-13T00:00:00Z Last Updated: 2024-09-17T00:01:16.973Z Vendors: ICS-CERT Products: WECON LeviStudioU Problem Types: CWE-119 Description: A memory corruption vulnerability has been identified in WECON LeviStudioU version 1.8.56 and prior, which may allow arbitrary code execution. Mat Powell, Ziad Badawi, and Natnael Samson working with Trend Micro's Zero Day Initiative, reported these vulnerabilities to NCCIC. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106861 - https://ics-cert.us-cert.gov/advisories/ICSA-19-036-03
CVE ID: CVE-2019-6542 State: PUBLISHED Published: 2019-03-28T13:50:25 Last Updated: 2024-08-04T20:23:21.439Z Vendors: ENTTEC Products: Datagate MK2, Storm 24, Pixelator Problem Types: CWE-306 Description: ENTTEC Datagate MK2, Storm 24, Pixelator all firmware versions prior to (70044,70050,70060)_update_05032019-482 allows an unauthenticated user to initiate a remote reboot, which may be used to cause a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-085-03-0
CVE ID: CVE-2019-6543 State: PUBLISHED Published: 2019-02-13T01:00:00Z Last Updated: 2024-09-16T18:14:25.090Z Vendors: ICS-CERT Products: AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update Problem Types: CWE-306 Description: AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. Code is executed under the program runtime privileges, which could lead to the compromise of the machine. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-036-01
Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-036-01 - https://www.exploit-db.com/exploits/46342/ - https://www.tenable.com/security/research/tra-2019-04
CVE ID: CVE-2019-6544 State: PUBLISHED Published: 2019-05-09T14:51:24 Last Updated: 2024-08-04T20:23:22.133Z Vendors: n/a Products: GE Communicator Problem Types: CWE-284 Description: GE Communicator, all versions prior to 4.0.517, has a service running with system privileges that may allow an unprivileged user to perform certain administrative actions, which may allow the execution of scheduled scripts with system administrator privileges. This service is inaccessible to attackers if Windows default firewall settings are used by the end user. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02
CVE ID: CVE-2019-6545 State: PUBLISHED Published: 2019-02-13T01:00:00Z Last Updated: 2024-09-16T22:50:28.981Z Vendors: ICS-CERT Products: AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update Problem Types: CWE-99 Description: AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. An unauthenticated remote user could use a specially crafted database connection configuration file to execute an arbitrary process on the server machine. Additional Analyst Notes: - CVE Program Container: References: - https:
cute an arbitrary process on the server machine. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-036-01 - https://www.exploit-db.com/exploits/46342/ - https://www.tenable.com/security/research/tra-2019-04
CVE ID: CVE-2019-6546 State: PUBLISHED Published: 2019-05-09T14:27:35 Last Updated: 2024-08-04T20:23:21.493Z Vendors: n/a Products: GE Communicator Problem Types: CWE-427 Description: GE Communicator, all versions prior to 4.0.517, allows an attacker to place malicious files within the working directory of the program, which may allow an attacker to manipulate widgets and UI elements. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02
CVE ID: CVE-2019-6547 State: PUBLISHED Published: 2019-02-28T21:00:00Z Last Updated: 2024-09-17T01:16:41.112Z Vendors: ICS-CERT Products: Delta Industrial Automation CNCSoft Problem Types: CWE-125 Description: Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability may cause the software to crash due to lacking user input validation for processing project files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107086 - https://ics-cert.us-cert.gov/advisories/ICSA-19-050-02
CVE ID: CVE-2019-6548 State: PUBLISHED Published: 2019-05-09T14:28:07 Last Updated: 2024-08-04T20:23:21.489Z Vendors: n/a Products: GE Communicator Problem Types: CWE-798 Description: GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the database. This service is inaccessible to attackers if Windows default firewall settings are used by the end user. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02
CVE ID: CVE-2019-6549 State: PUBLISHED Published: 2019-02-12T18:00:00Z Last Updated: 2024-09-16T22:30:41.714Z Vendors: ICS-CERT Products: PR100088 Modbus gateway Problem Types: CWE-312 Description: An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) through FTP. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05
CVE ID: CVE-2019-6550 State: PUBLISHED Published: 2019-04-05T18:09:34 Last Updated: 2024-08-04T20:23:21.543Z Vendors: Advantech Products: WebAccess/SCADA Problem Types: CWE-121 Description: Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple stack-based buffer overflow vulnerabilities, caused by a lack of proper validation of the length of user-supplied data, may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-092-01 - https://www.zerodayinitiative.com/advisories/ZDI-19-585/
CVE ID: CVE-2019-6551 State: PUBLISHED Published: 2019-02-28T21:00:00Z Last Updated: 2024-09-16T19:40:09.741Z Vendors: ICS-CERT Products: Pangea Communications Internet FAX ATA Problem Types: CWE-288 Description: Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the device to reboot, which may be used to cause a continual denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107031 - https://ics-cert.us-cert.gov/advisories/ICSA-19-045-01
CVE ID: CVE-2019-6552 State: PUBLISHED Published: 2019-04-05T18:02:39 Last Updated: 2024-08-04T20:23:22.066Z Vendors: Advantech Products: WebAccess/SCADA Problem Types: CWE-77 Description: Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple command injection vulnerabilities, caused by a lack of proper validation of user-supplied data, may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-092-01
CVE ID: CVE-2019-6553 State: PUBLISHED Published: 2019-04-04T18:59:09 Last Updated: 2024-08-04T20:23:21.569Z Vendors: Rockwell Automation Products: RSLinx Classic Problem Types: CWE-121 Description: A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior. An input validation issue in a .dll file of RSLinx Classic where the data in a Forward Open service request is passed to a fixed size buffer, allowing an attacker to exploit a stack-based buffer overflow condition. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-064-01
CVE ID: CVE-2019-6554 State: PUBLISHED Published: 2019-04-05T18:15:35 Last Updated: 2024-08-04T20:23:21.684Z Vendors: Advantech Products: WebAccess/SCADA Problem Types: CWE-284 Description: Advantech WebAccess/SCADA, Versions 8.3.5 and prior. An improper access control vulnerability may allow an attacker to cause a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-092-01
CVE ID: CVE-2019-6555 State: PUBLISHED Published: 2019-02-28T20:00:00Z Last Updated: 2024-09-16T23:56:32.853Z Vendors: ICS-CERT Products: Cscape Problem Types: CWE-20 Description: Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker to read confidential information and remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-050-03 - http://www.securityfocus.com/bid/107087
CVE ID: CVE-2019-6556 State: PUBLISHED Published: 2019-04-10T19:48:50 Last Updated: 2024-08-04T20:23:22.210Z Vendors: Omron Products: CX-Programmer within CX-One Problem Types: CWE-416 Description: When processing project files, the application (Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior) fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-094-01 - https://www.zerodayinitiative.com/advisories/ZDI-19-344/
CVE ID: CVE-2019-6557 State: PUBLISHED Published: 2019-03-05T21:00:00Z Last Updated: 2024-09-16T18:24:17.372Z Vendors: ICS-CERT Products: Moxa IKS, EDS Problem Types: CWE-120 Description: Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01 - http://www.securityfocus.com/bid/107178
CVE ID: CVE-2019-6558 State: PUBLISHED Published: 2020-03-23T20:07:03 Last Updated: 2024-08-04T20:23:21.499Z Vendors: n/a Products: Auto-Maskin RP210E Versions 3.7 and prior DCU210E Versions 3.7 and prior and Marine Observer Pro (Android App) Problem Types: CWE-521 Description: In Auto-Maskin RP210E Versions 3.7 and prior, DCU210E Versions 3.7 and prior and Marine Observer Pro (Android App), the software contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-051-04
CVE ID: CVE-2019-6559 State: PUBLISHED Published: 2019-03-05T21:00:00Z Last Updated: 2024-09-16T21:04:33.139Z Vendors: ICS-CERT Products: Moxa IKS, EDS Problem Types: CWE-400 Description: Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which may cause the switch to crash. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01 - http://www.securityfocus.com/bid/107178
CVE ID: CVE-2019-6560 State: PUBLISHED Published: 2020-03-23T19:37:33 Last Updated: 2024-08-04T20:23:21.498Z Vendors: n/a Products: Auto-Maskin RP210E Versions 3.7 and prior DCU210E Versions 3.7 and prior and Marine Observer Pro (Android App) Problem Types: CWE-640 Description: In Auto-Maskin RP210E Versions 3.7 and prior, DCU210E Versions 3.7 and prior and Marine Observer Pro (Android App), the software contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-051-04
CVE ID: CVE-2019-6561 State: PUBLISHED Published: 2019-03-05T21:00:00Z Last Updated: 2024-09-16T17:27:37.822Z Vendors: ICS-CERT Products: Moxa IKS, EDS Problem Types: CWE-352 Description: Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01 - http://www.securityfocus.com/bid/107178
CVE ID: CVE-2019-6562 State: PUBLISHED Published: 2019-05-01T18:23:11 Last Updated: 2024-08-04T20:23:22.051Z Vendors: Philips Products: Philips Tasy EMR Problem Types: CWE-79 Description: In Philips Tasy EMR, Tasy EMR Versions 3.02.1744 and prior, the software incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-19-120-01
CVE ID: CVE-2019-6563 State: PUBLISHED Published: 2019-03-05T21:00:00Z Last Updated: 2024-09-16T18:44:20.929Z Vendors: ICS-CERT Products: Moxa IKS, EDS Problem Types: CWE-341 Description: Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01 - http://www.securityfocus.com/bid/107178
CVE ID: CVE-2019-6564 State: PUBLISHED Published: 2019-05-09T14:27:08 Last Updated: 2024-08-04T20:23:22.042Z Vendors: n/a Products: GE Communicator Problem Types: CWE-427 Description: GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to place malicious files within the installer file directory, which may allow an attacker to gain administrative privileges on a system during installation or upgrade. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02
CVE ID: CVE-2019-6565 State: PUBLISHED Published: 2019-03-05T21:00:00Z Last Updated: 2024-09-16T23:46:45.123Z Vendors: ICS-CERT Products: Moxa IKS, EDS Problem Types: CWE-79 Description: Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01 - http://www.securityfocus.com/bid/107178
CVE ID: CVE-2019-6566 State: PUBLISHED Published: 2019-05-09T14:51:49 Last Updated: 2024-08-04T20:23:21.879Z Vendors: n/a Products: GE Communicator Problem Types: CWE-284 Description: GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to replace the uninstaller with a malicious version, which could allow an attacker to gain administrator privileges to the system. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02
CVE ID: CVE-2019-6567 State: PUBLISHED Published: 2019-06-12T13:47:56 Last Updated: 2024-08-04T20:23:22.108Z Vendors: Siemens Products: SCALANCE X-200 switch family (incl. SIPLUS NET variants), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants), SCALANCE X-414-3E Problem Types: CWE-257 Description: A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions < V5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X-414-3E (All vers
, SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X-414-3E (All versions). The affected devices store passwords in a recoverable format. An attacker may extract and recover device passwords from the device configuration. Successful exploitation requires access to a device configuration backup and impacts confidentiality of the stored passwords. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-646841.pdf
CVE ID: CVE-2019-6568 State: PUBLISHED Published: 2019-04-17T13:40:24 Last Updated: 2024-08-04T20:23:22.207Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC CP 1604, SIMATIC CP 1616, SIMATIC CP 343-1 Advanced, SIMATIC CP 443-1, SIMATIC CP 443-1 Advanced, SIMATIC CP 443-1 OPC UA, SIMATIC ET 200pro IM154-8 PN/DP CPU, SIMATIC ET 200pro IM154-8F PN/DP CPU, SIMATIC ET 200pro IM154-8FX PN/DP CPU, SIMATIC ET 200S IM151-8 PN/DP CPU, SIMATIC ET 200S IM151-8F PN/DP CPU, SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), SIMATIC HMI Comfor
PC (incl. SIPLUS variants), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants), SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F, SIMATIC IPC DiagMonitor, SIMATIC RF182C, SIMATIC RF185C, SIMATIC RF186C, SIMATIC RF188C, SIMATIC RF600R family, SIMATIC RFID 181EIP, SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller, SIMATIC S7-300 CPU 314C-2 PN/DP, SIMATIC S7-300 CPU 315-2 PN/DP, SIMATIC S7-300 CPU 315F-2 PN/DP, SIMATIC S7-300 CPU 315T-3 PN/DP, SIMATIC S7-300 C
N/DP, SIMATIC S7-300 CPU 315-2 PN/DP, SIMATIC S7-300 CPU 315F-2 PN/DP, SIMATIC S7-300 CPU 315T-3 PN/DP, SIMATIC S7-300 CPU 317-2 PN/DP, SIMATIC S7-300 CPU 317F-2 PN/DP, SIMATIC S7-300 CPU 317T-3 PN/DP, SIMATIC S7-300 CPU 317TF-3 PN/DP, SIMATIC S7-300 CPU 319-3 PN/DP, SIMATIC S7-300 CPU 319F-3 PN/DP, SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants), SIMATIC S7-PLCSIM Advanced, SIMATIC Teleservice Adapter IE Advanced, SIMATIC Teleservice Adapter IE Basic, SIMATIC Teleservice Adapter IE Standard, SIMATIC WinAC RTX 2010, SIMATIC WinAC RTX F 2010, SIMATIC WinCC Runtime Advanced, SIMOCODE pro V Ethernet/IP (incl. SIPLU
IMATIC WinAC RTX 2010, SIMATIC WinAC RTX F 2010, SIMATIC WinCC Runtime Advanced, SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants), SIMOCODE pro V PROFINET (incl. SIPLUS variants), SINAMICS G130 V4.6 Control Unit, SINAMICS G130 V4.7 Control Unit, SINAMICS G130 V4.7 SP1 Control Unit, SINAMICS G130 V4.8 Control Unit, SINAMICS G130 V5.1 Control Unit, SINAMICS G130 V5.1 SP1 Control Unit, SINAMICS G150 V4.6 Control Unit, SINAMICS G150 V4.7 Control Unit, SINAMICS G150 V4.7 SP1 Control Unit, SINAMICS G150 V4.8 Control Unit, SINAMICS G150 V5.1 Control Unit, SINAMICS G150 V5.1 SP1 Control Unit, SINAMICS GH150 V4.7 (Control Unit), SINAMICS GH150 V4.8 (Control Unit), SINAMICS GL150 V4.7 (Control Unit)
Control Unit, SINAMICS GH150 V4.7 (Control Unit), SINAMICS GH150 V4.8 (Control Unit), SINAMICS GL150 V4.7 (Control Unit), SINAMICS GL150 V4.8 (Control Unit), SINAMICS GM150 V4.7 (Control Unit), SINAMICS GM150 V4.8 (Control Unit), SINAMICS S120 V4.6 Control Unit (incl. SIPLUS variants), SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants), SINAMICS S120 V4.7 SP1 Control Unit (incl. SIPLUS variants), SINAMICS S120 V4.8 Control Unit (incl. SIPLUS variants), SINAMICS S120 V5.1 Control Unit (incl. SIPLUS variants), SINAMICS S120 V5.1 SP1 Control Unit (incl. SIPLUS variants), SINAMICS S150 V4.6 Control Unit, SINAMICS S150 V4.7 Control Unit, SINAMICS S150 V4.7 SP1 Control Unit, SINAMICS S150 V4.
SINAMICS S150 V4.6 Control Unit, SINAMICS S150 V4.7 Control Unit, SINAMICS S150 V4.7 SP1 Control Unit, SINAMICS S150 V4.8 Control Unit, SINAMICS S150 V5.1 Control Unit, SINAMICS S150 V5.1 SP1 Control Unit, SINAMICS S210, SINAMICS SL150 V4.7 (Control Unit), SINAMICS SL150 V4.8 (Control Unit), SINAMICS SM120 V4.7 (Control Unit), SINAMICS SM120 V4.8 (Control Unit), SINAMICS SM150 V4.8 (Control Unit), SIPLUS ET 200S IM151-8 PN/DP CPU, SIPLUS ET 200S IM151-8F PN/DP CPU, SIPLUS NET CP 343-1 Advanced, SIPLUS NET CP 443-1, SIPLUS NET CP 443-1 Advanced, SIPLUS S7-300 CPU 314C-2 PN/DP, SIPLUS S7-300 CPU 315-2 PN/DP, SIPLUS S7-300 CPU 315F-2 PN/DP, SIPLUS S7-300 CPU 317-2 PN/DP, SIPLUS S7-300 CPU 317F-
P, SIPLUS S7-300 CPU 315-2 PN/DP, SIPLUS S7-300 CPU 315F-2 PN/DP, SIPLUS S7-300 CPU 317-2 PN/DP, SIPLUS S7-300 CPU 317F-2 PN/DP, SITOP Manager, SITOP PSU8600, SITOP UPS1600 (incl. SIPLUS variants), TIM 1531 IRC (incl. SIPLUS NET variants) Problem Types: CWE-125 Description: The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker
cess to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-480230.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-530931.pdf
CVE ID: CVE-2019-6569 State: PUBLISHED Published: 2019-03-26T21:12:43 Last Updated: 2024-08-04T20:23:22.201Z Vendors: Siemens Products: SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X206-1, SCALANCE X206-1LD, SCALANCE X208, SCALANCE X208PRO, SCALANCE X212-2, SCALANCE X212-2LD, SCALANCE X216, SCALANCE X224, SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V),
EC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XB205-3 (SC), SCALANCE XB205-3 (ST/BFOC), SCALANCE XB205-3LD, SCALANCE