CVE-2019-10938
First published: Fri Aug 02 2019(Updated: )
A vulnerability has been identified in SIPROTEC 5 devices with CPU variants CP200 (All versions < V7.59), SIPROTEC 5 devices with CPU variants CP300 and CP100 (All versions < V8.01), Siemens Power Meters Series 9410 (All versions < V2.2.1), Siemens Power Meters Series 9810 (All versions). An unauthenticated attacker with network access to the device could potentially insert arbitrary code which is executed before firmware verification in the device. At the time of advisory publication no public exploitation of this security vulnerability was known.
Credit: productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens SIPROTEC 5 DIGSI Device Driver | ||
| Siemens 6MD85 Firmware | ||
| Siemens 6MD86 Firmware | ||
| Siemens 6MD89 Firmware | ||
| Siemens 7SA82 Firmware | ||
| Siemens 7SA86 Firmware | ||
| Siemens 7SA87 Firmware | ||
| Siemens Siprotec 5 7sd82 | ||
| Siemens 7SD86 firmware | ||
| Siemens 7SD87 Firmware | ||
| Siemens Siprotec 5 7SJ82 | ||
| Siemens 7SJ85 firmware | ||
| Siemens 7SJ86 Firmware | ||
| Siemens 7SK82 Firmware | ||
| Siemens 7SK85 Firmware | ||
| Siemens 7SL82 Firmware | ||
| Siemens 7SL86 Firmware | ||
| Siemens 7SL87 Firmware | ||
| Siemens 7UM85 Firmware | ||
| Siemens 7UT82 Firmware | ||
| Siemens 7UT85 firmware | ||
| Siemens 7UT86 firmware | ||
| Siemens 7UT87 Firmware | ||
| Siemens 7VE85 firmware | ||
| Siemens 7VK87 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-10938?
The severity of CVE-2019-10938 is critical with a CVSS score of 9.8.
How do I fix CVE-2019-10938?
To fix CVE-2019-10938, update SIPROTEC 5 devices to versions V7.59 for CP200 CPU variants, V8.01 for CP300 and CP100 CPU variants, V2.2.1 for Siemens Power Meters Series 9410, or the latest version for Siemens Power Meters Series 9810.
What is the vulnerability description of CVE-2019-10938?
CVE-2019-10938 is a vulnerability found in SIPROTEC 5 devices and Siemens Power Meters Series, allowing unauthorized access.
Are Siemens 6md85, 6md86, 6md89, 7sa82, 7sa86, 7sa87, 7sd82, 7sd86, 7sd87, 7sj82, 7sj85, 7sj86, 7sk82, 7sk85, 7sl82, 7sl86, 7sl87, 7um85, 7ut82, 7ut85, 7ut86, 7ut87, 7ve85, and 7vk87 affected by CVE-2019-10938?
No, Siemens 6md85, 6md86, 6md89, 7sa82, 7sa86, 7sa87, 7sd82, 7sd86, 7sd87, 7sj82, 7sj85, 7sj86, 7sk82, 7sk85, 7sl82, 7sl86, 7sl87, 7um85, 7ut82, 7ut85, 7ut86, 7ut87, 7ve85, and 7vk87 are not affected by CVE-2019-10938.
Where can I find more information about CVE-2019-10938?
More information about CVE-2019-10938 can be found in the Siemens product security advisories linked in the references.
- agent/references
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/siemens
- canonical/siemens siprotec 5 digsi device driver
- canonical/siemens 6md85 firmware
- canonical/siemens 6md86 firmware
- canonical/siemens 6md89 firmware
- canonical/siemens 7sa82 firmware
- canonical/siemens 7sa86 firmware
- canonical/siemens 7sa87 firmware
- canonical/siemens siprotec 5 7sd82
- canonical/siemens 7sd86 firmware
- canonical/siemens 7sd87 firmware
- canonical/siemens siprotec 5 7sj82
- canonical/siemens 7sj85 firmware
- canonical/siemens 7sj86 firmware
- canonical/siemens 7sk82 firmware
- canonical/siemens 7sk85 firmware
- canonical/siemens 7sl82 firmware
- canonical/siemens 7sl86 firmware
- canonical/siemens 7sl87 firmware
- canonical/siemens 7um85 firmware
- canonical/siemens 7ut82 firmware
- canonical/siemens 7ut85 firmware
- canonical/siemens 7ut86 firmware
- canonical/siemens 7ut87 firmware
- canonical/siemens 7ve85 firmware
- canonical/siemens 7vk87