CVE-2019-10922
First published: Tue May 14 2019(Updated: )
A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 and newer (All versions), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 and newer (All versions). An attacker with network access to affected installations, which are configured without "Encrypted Communication", can execute arbitrary code. The security vulnerability could be exploited by an unauthenticated attacker with network access to the affected installation. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.
Credit: productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SIEMENS SIMATIC PCS 7 | <=8.0 | |
| SIEMENS SIMATIC PCS 7 | >=8.1 | |
| Siemens Simatic WinCC | <=7.2 | |
| Siemens Simatic WinCC | >=7.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-10922?
CVE-2019-10922 is a vulnerability identified in SIMATIC PCS 7 and SIMATIC WinCC products.
What is the severity of CVE-2019-10922?
The severity of CVE-2019-10922 is critical, with a CVSS score of 9.8.
What software versions are affected by CVE-2019-10922?
CVE-2019-10922 affects SIMATIC PCS 7 versions 8.0 and earlier, as well as SIMATIC PCS 7 versions 8.1 and newer, SIMATIC WinCC versions 7.2 and earlier, and SIMATIC WinCC versions 7.3 and newer.
How can an attacker exploit CVE-2019-10922?
An attacker with network access to affected installations can exploit CVE-2019-10922.
Are there any references for CVE-2019-10922?
Yes, you can find more information about CVE-2019-10922 at the following links: [link1](http://www.securityfocus.com/bid/108398), [link2](https://cert-portal.siemens.com/productcert/pdf/ssa-705517.pdf)
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/siemens
- canonical/siemens simatic pcs 7
- version/siemens simatic pcs 7/8.0
- version/siemens simatic pcs 7/8.1
- canonical/siemens simatic wincc
- version/siemens simatic wincc/7.2
- version/siemens simatic wincc/7.3