Vulnerability in Siemens Opc_unified_architecture
CVE-2019-6575
A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.7), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variant…
EPSS: 0.011 (78.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Siemens Opc_unified_architecture
- Siemens Simatic Cp 443-1 Opc Ua — versions All versions
- Siemens Simatic_cp443-1_opc_ua
- Siemens Simatic_cp443-1_opc_ua_firmware
- Siemens Simatic_et_200_open_controller_cpu_1515sp_pc2
- Siemens Simatic_et_200_open_controller_cpu_1515sp_pc2_firmware
- Siemens Simatic Et 200sp Open Controller Cpu 1515sp Pc2 (Incl. Siplus Variants) — versions All versions < V2.7
- Siemens Simatic_hmi_comfort_outdoor_panels
- Siemens Simatic Hmi Comfort Outdoor Panels 7" & 15" (Incl. Siplus Variants) — versions All versions < V15.1 Upd 4
- Siemens Simatic_hmi_comfort_outdoor_panels_firmware — versions 15.1
Weakness classification (CWE)
References
- productcert@siemens.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-6575?
- CVE-2019-6575 is a high-severity vulnerability in Siemens Opc_unified_architecture, classified under CWE-248. CVSS score: 7.5/10. Published 2019-04-17.
- How severe is CVE-2019-6575?
- High severity. CVSS v3 base score is 7.5 out of 10.