Siemens CVEs — known vulnerabilities

Sinema Remote Connect Server HIGH 8.8

CVE-2019-6570

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attac…

Fix: 2.0+

Fix from $1,950 2019-04-17

Simatic S7 1500 Firmware HIGH 7.5

CVE-2018-16558

A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All versions <= V1.8.5). Specially…

Fix: 2.5+

Fix from $1,950 2019-04-17

Simatic S7 1500 Firmware HIGH 7.5

CVE-2018-16559

A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All versions <= V1.8.5). Specially…

Fix: 2.5+

Fix from $1,950 2019-04-17

Simatic S7 300 Firmware HIGH 7.5

CVE-2018-16561

A vulnerability has been identified in SIMATIC S7-300 CPUs (All versions < V3.X.16). The affected CPUs improperly validate S7 communication packets w…

Mitigation only

Fix from $1,950 2019-04-17

Cp1604 Firmware HIGH 7.5

CVE-2019-6568

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of ser…

Fix: 1.1.0 / 2.1.6+

Fix from $1,950 2019-04-17

Simatic Cp443 1 Opc Ua Firmware HIGH 7.5

CVE-2019-6575

A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants…

Fix: 2.7+

Fix from $1,950 2019-04-17

Cp 1604 Firmware MEDIUM 6.5

CVE-2018-13810

A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). The integrated configuration web server of the affected CP dev…

Fix: after 2.8

Fix from $1,600 2019-04-17

Cp 1604 Firmware CRITICAL 9.1

CVE-2018-13808

A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). An attacker with network access to port 23/tcp could extract i…

Fix: after 2.8

Fix from $2,300 2019-04-17

Cp 1604 Firmware MEDIUM 6.1

CVE-2018-13809

A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). The integrated web server of the affected CP devices could all…

Fix: after 2.8

Fix from $1,600 2019-04-17

Scalance X 200 Firmware CRITICAL 9.1

CVE-2019-6569

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attac…

Fix: 4.1 / 4.1.3+

Fix from $2,300 2019-03-26

Sicam A8000 Cp 8000 Firmware HIGH 7.5

CVE-2018-13798

A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP-802X (All versions < V14), SICAM A8000 CP-8050 (All v…

Fix: 2.00 / 14+

Fix from $1,950 2019-03-21

Siprotec 5 With Cpu Variant Cp100 MEDIUM 5.9

CVE-2018-16563

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.35), Firmware variant MODBUS TCP for E…

Fix: 7.58 / 7.82+

Fix from $1,600 2019-03-21

Simatic Hmi Comfort Panels Firmware HIGH 8.8

CVE-2018-13814

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V14), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All ver…

Fix: 14.0+