CVE-2019-10937
A vulnerability has been identified in SIMATIC TDC CP51M1 (All versions < V1.1.7). An attacker with network access to the device could cause a Denial-of-Service condition by sending a specially crafted UDP packet. The vulnerability affects the UDP communication of the device. The security vulnerability could be exploited without authentication. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises availability of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.
EPSS 0.77% · 73.9th percentile
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens AG | SIMATIC TDC CP51M1 | All versions < V1.1.7 |
| siemens | simatic_tdc_cp51m1_firmware | 0 |
Exploit Intelligence
Timeline
- Sep 10, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Nov 6, 2022 EPSS Score
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-250618.pdf advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-187667.pdf advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-834884.pdf advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-191683.pdf advisory
- https://www.us-cert.gov/ics/advisories/icsa-19-253-05 url
- https://nvd.nist.gov/vuln/detail/CVE-2019-10937 advisory