ICSA-19-344-06 — Vulnetix

ICSA-19-344-06 PUBLISHED CVSS 3.700000047683716 LOW

Successful exploitation of these vulnerabilities may allow an attacker to modify network traffic or impact the perceived integrity of the user program stored on the CPU.

Risk Scores

CVSS 3.1

3.700000047683716

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected Products

Vendor	Product	Versions
	SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): Versions 20.8 and later (only affected by CVE-2019-10943)
	SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): All versions prior to V20.8
	SIMATIC S7-1500 Software Controller: Versions 20.8 and later (only affected by CVE-2019-10943)
	SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions prior to V2.8.1
	SIMATIC S7-PLCSIM Advanced: Versions 3.0 and later (only affected by CVE-2019-10943)
	SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions prior to V4.4.0
	SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): Versions 2.8.1 and later (only affected by CVE-2019-10943)
	SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants): All versions
	SIMATIC S7-1200 CPU family (incl. SIPLUS variants): Versions 4.4.0 and later (only affected by CVE-2019-10943)
	SIMATIC S7-1500 Software Controller: All versions prior to V20.8
	SIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC: All versions
	* (only affected by CVE
	SIMATIC S7-PLCSIM Advanced: All versions prior to V3.0

Timeline

Dec 10, 2019 CVE Published
Mar 10, 2020 CVE Updated

References

Open in Interactive Console →