Improper input validation in Siemens Simatic Tdc Cp51m1
CVE-2019-10937
A vulnerability has been identified in SIMATIC TDC CP51M1 (All versions < V1.1.7). An attacker with network access to the device could cause a Denial-of-Service condition by sending a specially crafted UDP packet. The vulnerability affects the UDP communication of the device. The security vulnerability could be exploited without authentication. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises availability of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.013 (69.1th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 69th percentile — 69.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.015 · newest: 0.013 · change: -0.002
Affected products
- Siemens Simatic Tdc Cp51m1
- Siemens Simatic Tdc Cp51m1 Firmware
- Siemens Ag Simatic Tdc Cp51m1 — versions All versions < V1.1.7
Weakness classification (CWE)
References
- cert-portal.siemens.com/productcert/pdf/ssa-250618.pdf (Patch, Vendor Advisory)
- www.us-cert.gov/ics/advisories/icsa-19-253-05
Frequently asked questions
- What is CVE-2019-10937?
- CVE-2019-10937 is a high-severity vulnerability in Siemens Simatic Tdc Cp51m1, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2019-09-13.
- How severe is CVE-2019-10937?
- High severity. CVSS v3 base score is 7.5 out of 10.