VDB
ICSA-19-344-07
ICSA-19-344-07
PUBLISHED
CVSS 7.5 HIGH
Successful exploitation of these vulnerabilities could allow an attacker to execute remote code, cause a denial-of-service condition, and obtain sensitive information about the device.
Risk Scores
CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| EN100 Ethernet module DNP3 variant: All versions | ||
| EN100 Ethernet module IEC104 variant: All versions | ||
| EN100 Ethernet module PROFINET IO variant: All versions | ||
| EN100 Ethernet module Modbus TCP variant: All versions | ||
| EN100 Ethernet module IEC 61850 variant: All versions < V4.37 |
Timeline
- Dec 10, 2019 CVE Published
- Jan 14, 2020 CVE Updated
References
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-344-07.json advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-19-344-07 advisory
- https://www.us-cert.gov/ncas/tips/ST04-014 url
- https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf url
- https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B url
- https://cert-portal.siemens.com/productcert/txt/SSA-418979.txt url
- https://support.industry.siemens.com/cs/us/en/view/109745821 fix