Resource exhaustion in Siemens Sinamics Perfect Harmony Gh180 With Nxg I Control Mlfb 6sr2
CVE-2019-6578
A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- (All Versions with option G28), SINAMICS PERFECT HARMONY GH180 with NXG II control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- (All Versions with option G28). A denial of service vulnerability exists in the affected products. The vulnerability could be exploited by an attacker with network access to the device. Successful exploitation requires no privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.
Vulnerability class: DoS (Denial of Service)
EPSS: 0.016 (72.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Siemens Sinamics_perfect_harmony_gh180_with_nxg_i_control_mlfb_6sr2
- Siemens Sinamics_perfect_harmony_gh180_with_nxg_i_control_mlfb_6sr2_firmware
- Siemens Sinamics_perfect_harmony_gh180_with_nxg_i_control_mlfb_6sr3
- Siemens Sinamics_perfect_harmony_gh180_with_nxg_i_control_mlfb_6sr3_firmware
- Siemens Sinamics_perfect_harmony_gh180_with_nxg_i_control_mlfb_6sr4
- Siemens Sinamics_perfect_harmony_gh180_with_nxg_i_control_mlfb_6sr4_firmware
- Siemens Sinamics_perfect_harmony_gh180_with_nxg_ii_control_mlfb_6sr2
- Siemens Sinamics_perfect_harmony_gh180_with_nxg_ii_control_mlfb_6sr2_firmware
- Siemens Sinamics_perfect_harmony_gh180_with_nxg_ii_control_mlfb_6sr3
- Siemens Sinamics_perfect_harmony_gh180_with_nxg_ii_control_mlfb_6sr3_firmware
Weakness classification (CWE)
References
- productcert@siemens.com (x_refsource_MISC, Vendor Advisory)
- productcert@siemens.com (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-6578?
- CVE-2019-6578 is a high-severity vulnerability in Siemens Sinamics Perfect Harmony Gh180 With Nxg I Control Mlfb 6sr2, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2019-05-14.
- How severe is CVE-2019-6578?
- High severity. CVSS v3 base score is 7.5 out of 10.