Vulnerability in Siemens Simatic Cp 1626
CVE-2019-10929
A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All vers…
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.010 (58.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Siemens Simatic Cp 1626 — versions All versions
- Siemens Simatic_cp_1626
- Siemens Simatic_cp_1626_firmware
- Siemens Simatic_et_200sp_open_controller_cpu_1515sp_pc
- Siemens Simatic_et_200sp_open_controller_cpu_1515sp_pc2
- Siemens Simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware
- Siemens Simatic Et 200sp Open Controller Cpu 1515sp Pc2 (Incl. Siplus Variants) — versions All versions < V20.8
- Siemens Simatic_et_200sp_open_controller_cpu_1515sp_pc_firmware
- Siemens Simatic Et 200sp Open Controller Cpu 1515sp Pc (Incl. Siplus Variants) — versions All versions
- Siemens Simatic_hmi_panel
Weakness classification (CWE)
Public proof-of-concept exploits
References
- productcert@siemens.com (x_refsource_MISC, Vendor Advisory)
- productcert@siemens.com (x_refsource_MISC, Vendor Advisory)
- productcert@siemens.com (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-10929?
- CVE-2019-10929 is a medium-severity vulnerability in Siemens Simatic Cp 1626, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 5.9/10. Published 2019-08-13.
- How severe is CVE-2019-10929?
- Medium severity. CVSS v3 base score is 5.9 out of 10.
- Is CVE-2019-10929 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.