Vulnerability in Siemens Simatic Drive Controller Family
CVE-2019-10943
A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS var…
EPSS: 0.010 (57.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Siemens Simatic Drive Controller Family — versions All versions
- Siemens Simatic_et_200sp_open_controller_cpu_1515sp_pc
- Siemens Simatic_et_200sp_open_controller_cpu_1515sp_pc2
- Siemens Simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware
- Siemens Simatic Et 200sp Open Controller Cpu 1515sp Pc2 (Incl. Siplus Variants) — versions All versions >= V20.8, All versions < V20.8
- Siemens Simatic_et_200sp_open_controller_cpu_1515sp_pc_firmware
- Siemens Simatic Et 200sp Open Controller Cpu 1515sp Pc (Incl. Siplus Variants) — versions All versions
- Siemens Simatic_s7-1200_cpu_1211c
- Siemens Simatic_s7-1200_cpu_1211c_firmware
- Siemens Simatic_s7-1200_cpu_1212c
Weakness classification (CWE)
Public proof-of-concept exploits
References
- productcert@siemens.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-10943?
- CVE-2019-10943 is a high-severity vulnerability in Siemens Simatic Drive Controller Family, classified under CWE-353. CVSS score: 7.5/10. Published 2019-08-13.
- How severe is CVE-2019-10943?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2019-10943 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.