CERTFR-2019-AVI-615
Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Siemens N/A SPPA-T3000 MS3000 Migration Server
Siemens N/A SiNVR 3 Central Control Server (CCS)
Siemens N/A SIMATIC S7-1200 CPU
Siemens N/A RUGGEDCOM ROS RSG9xx R/C
Siemens N/A RUGGEDCOM ROS RMC8388
Siemens N/A EN100 Ethernet module Modbus TCP
Siemens N/A SIMATIC WinCC OA
Siemens N/A SIMATIC CP 1626
Siemens N/A SCALANCE W700 versions antérieures à V6.4
Siemens N/A SIMATIC NET PC
Siemens N/A SIMATIC WinCC Runtime Professional
Siemens N/A EN100 Ethernet module IEC 61850 versions antérieures à V4.37
Siemens N/A SPPA-T3000 Application Server versions antérieures à Service Pack R8.2 SP1
Siemens N/A SIMATIC WinCC Runtime Advanced
Siemens N/A RUGGEDCOM ROS RSL910
Siemens N/A SIMATIC WinCC (TIA Portal) versions antérieures à V16
Siemens N/A Famille de commutateurs SCALANCE X-200IRT et les variantes SIPLUSNET versions antérieures à V5.4.2
Siemens N/A SIMATIC S7-200 SMART CPU
Siemens N/A SIMATIC WinCC OA versions antérieures à 3.16 patch version 13
Siemens N/A SiNVR 3 Video Server
Siemens N/A EN100 Ethernet module DNP3
Siemens N/A SCALANCE W1700 versions antérieures à V1.1
Siemens N/A RUGGEDCOM ROS RSG2488
Siemens N/A EN100 Ethernet module PROFINET IO
Siemens N/A EN100 Ethernet module IEC104
Siemens N/A RUGGEDCOM ROS RSG920P
Siemens N/A TIM 1531 IRC
Siemens N/A XHQ versions antérieures à V6.0.0.2
Siemens N/A SIMATIC STEP 7 (TIA Portal) versions antérieures à V16
Siemens N/A RUGGEDCOM ROS RST2228
Siemens N/A SIMATIC HMI Panel
Siemens N/A Famille de commutateurs SCALANCE X-200 et les variantes SIPLUSNET versions antérieures à V5.2.4
References

Show details on source website

To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "SPPA-T3000 MS3000 Migration Server",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SiNVR 3 Central Control Server (CCS)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC S7-1200 CPU",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "RUGGEDCOM ROS RSG9xx R/C",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "RUGGEDCOM ROS RMC8388",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "EN100 Ethernet module Modbus TCP",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC WinCC OA",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC CP 1626",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SCALANCE W700 versions ant\u00e9rieures \u00e0 V6.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET PC",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC WinCC Runtime Professional",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "EN100 Ethernet module IEC 61850 versions ant\u00e9rieures \u00e0 V4.37",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SPPA-T3000 Application Server versions ant\u00e9rieures \u00e0 Service Pack R8.2 SP1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC WinCC Runtime Advanced",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "RUGGEDCOM ROS RSL910",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC WinCC (TIA Portal) versions ant\u00e9rieures \u00e0 V16",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Famille de commutateurs SCALANCE X-200IRT et les variantes SIPLUSNET versions ant\u00e9rieures \u00e0 V5.4.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC S7-200 SMART CPU",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC WinCC OA versions ant\u00e9rieures \u00e0 3.16 patch version 13",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SiNVR 3 Video Server",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "EN100 Ethernet module DNP3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SCALANCE W1700 versions ant\u00e9rieures \u00e0 V1.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "RUGGEDCOM ROS RSG2488",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "EN100 Ethernet module PROFINET IO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "EN100 Ethernet module IEC104",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "RUGGEDCOM ROS RSG920P",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "TIM 1531 IRC",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "XHQ versions ant\u00e9rieures \u00e0 V6.0.0.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC STEP 7 (TIA Portal) versions ant\u00e9rieures \u00e0 V16",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "RUGGEDCOM ROS RST2228",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC HMI Panel",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Famille de commutateurs SCALANCE X-200 et les variantes SIPLUSNET versions ant\u00e9rieures \u00e0 V5.2.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2019-13944",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13944"
    },
    {
      "name": "CVE-2019-18339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18339"
    },
    {
      "name": "CVE-2019-18341",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18341"
    },
    {
      "name": "CVE-2019-18332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18332"
    },
    {
      "name": "CVE-2019-18335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18335"
    },
    {
      "name": "CVE-2019-18338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18338"
    },
    {
      "name": "CVE-2018-14526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-14526"
    },
    {
      "name": "CVE-2019-18319",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18319"
    },
    {
      "name": "CVE-2019-18331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18331"
    },
    {
      "name": "CVE-2019-18312",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18312"
    },
    {
      "name": "CVE-2019-18320",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18320"
    },
    {
      "name": "CVE-2019-18322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18322"
    },
    {
      "name": "CVE-2019-18283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18283"
    },
    {
      "name": "CVE-2019-18303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18303"
    },
    {
      "name": "CVE-2019-18302",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18302"
    },
    {
      "name": "CVE-2019-18311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18311"
    },
    {
      "name": "CVE-2019-18290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18290"
    },
    {
      "name": "CVE-2019-18292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18292"
    },
    {
      "name": "CVE-2019-18309",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18309"
    },
    {
      "name": "CVE-2019-18291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18291"
    },
    {
      "name": "CVE-2019-18304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18304"
    },
    {
      "name": "CVE-2019-18326",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18326"
    },
    {
      "name": "CVE-2019-18305",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18305"
    },
    {
      "name": "CVE-2019-18318",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18318"
    },
    {
      "name": "CVE-2013-3634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3634"
    },
    {
      "name": "CVE-2019-18334",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18334"
    },
    {
      "name": "CVE-2019-18299",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18299"
    },
    {
      "name": "CVE-2019-13932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13932"
    },
    {
      "name": "CVE-2019-18316",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18316"
    },
    {
      "name": "CVE-2019-18329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18329"
    },
    {
      "name": "CVE-2019-10929",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10929"
    },
    {
      "name": "CVE-2019-13931",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13931"
    },
    {
      "name": "CVE-2019-18333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18333"
    },
    {
      "name": "CVE-2019-18300",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18300"
    },
    {
      "name": "CVE-2019-18301",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18301"
    },
    {
      "name": "CVE-2019-18328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18328"
    },
    {
      "name": "CVE-2019-18321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18321"
    },
    {
      "name": "CVE-2019-13947",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13947"
    },
    {
      "name": "CVE-2019-18317",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18317"
    },
    {
      "name": "CVE-2019-18294",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18294"
    },
    {
      "name": "CVE-2019-13943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13943"
    },
    {
      "name": "CVE-2019-18330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18330"
    },
    {
      "name": "CVE-2019-18314",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18314"
    },
    {
      "name": "CVE-2019-18307",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18307"
    },
    {
      "name": "CVE-2019-13945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13945"
    },
    {
      "name": "CVE-2019-18308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18308"
    },
    {
      "name": "CVE-2013-3633",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3633"
    },
    {
      "name": "CVE-2019-18306",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18306"
    },
    {
      "name": "CVE-2019-18340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18340"
    },
    {
      "name": "CVE-2019-18342",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18342"
    },
    {
      "name": "CVE-2019-18325",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18325"
    },
    {
      "name": "CVE-2018-4832",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-4832"
    },
    {
      "name": "CVE-2019-18310",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18310"
    },
    {
      "name": "CVE-2019-13103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13103"
    },
    {
      "name": "CVE-2019-13930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13930"
    },
    {
      "name": "CVE-2019-18337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18337"
    },
    {
      "name": "CVE-2019-18323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18323"
    },
    {
      "name": "CVE-2019-18327",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18327"
    },
    {
      "name": "CVE-2018-18440",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-18440"
    },
    {
      "name": "CVE-2019-18315",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18315"
    },
    {
      "name": "CVE-2019-18298",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18298"
    },
    {
      "name": "CVE-2019-13942",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13942"
    },
    {
      "name": "CVE-2019-18313",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18313"
    },
    {
      "name": "CVE-2019-18324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18324"
    }
  ],
  "initial_release_date": "2019-12-10T00:00:00",
  "last_revision_date": "2019-12-10T00:00:00",
  "links": [],
  "reference": "CERTFR-2019-AVI-615",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2019-12-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSiemens. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-451445 du 10 d\u00e9cembre 2019",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-418979 du 10 d\u00e9cembre 2019",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-418979.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-170686 du 10 d\u00e9cembre 2019",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-170686.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-344983 du 10 d\u00e9cembre 2019",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-344983.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-761617 du 10 d\u00e9cembre 2019",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-618620 du 10 d\u00e9cembre 2019",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-618620.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-525454 du 10 d\u00e9cembre 2019",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-525454.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-686531 du 10 d\u00e9cembre 2019",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-686531.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-273799 du 10 d\u00e9cembre 2019",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-273799.pdf"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.