CVE-2019-10915
First published: Thu Jul 11 2019(Updated: )
A vulnerability has been identified in TIA Administrator (All versions < V1.0 SP1 Upd1). The integrated configuration web application (TIA Administrator) allows to execute certain application commands without proper authentication. The vulnerability could be exploited by an attacker with local access to the affected system. Successful exploitation requires no privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.
Credit: productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens Tia Administrator | =1.0-sp1 | |
| Siemens Sinetplan | =2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this security issue?
The vulnerability ID is CVE-2019-10915.
What is the affected software?
The affected software is Siemens TIA Administrator (versions < V1.0 SP1 Upd1) and Siemens Sinetplan (version 2.0).
What is the severity rating of CVE-2019-10915?
The severity rating of CVE-2019-10915 is high with a value of 7.8.
How can an attacker exploit this vulnerability?
An attacker with local access can exploit this vulnerability by executing certain application commands without proper authentication.
Where can I find more information about CVE-2019-10915?
You can find more information about CVE-2019-10915 at the following references: [SecurityFocus](http://www.securityfocus.com/bid/109124), [Siemens CERT Portal](https://cert-portal.siemens.com/productcert/pdf/ssa-721298.pdf), [Siemens CERT Portal](https://cert-portal.siemens.com/productcert/pdf/ssa-834884.pdf).
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/remedy
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/siemens
- canonical/siemens tia administrator
- version/siemens tia administrator/1.0-sp1
- canonical/siemens sinetplan
- version/siemens sinetplan/2.0