cnvd - cnvd-2019-22237

cnvd-2019-22237

Vulnerability from cnvd

Title: 多款Siemens产品存在未明漏洞

Description:

Siemens SIPROTEC 5和Siemens DIGISI 5都是德国西门子（Siemens）公司的产品。Siemens SIPROTEC 5是一款多功能继电器。Siemens DIGISI 5是一套用于Siemens SIPROTEC设备的用户界面。

多款Siemens产品存在未明漏洞。远程攻击者可以使用发送到端口443/TCP的特制数据包上传、下载或删除文件系统某些部分中的文件。

Severity: 高

Patch Name: 多款Siemens产品存在未明漏洞的补丁

Patch Description:

多款Siemens产品存在未明漏洞。远程攻击者可以使用发送到端口443/TCP的特制数据包上传、下载或删除文件系统某些部分中的文件。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf

Reference: https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf

Impacted products

Name
['Siemens DIGSI 5 < V7.90', 'Siemens SIPROTEC 5']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-10930"
    }
  },
  "description": "Siemens SIPROTEC 5\u548cSiemens DIGISI 5\u90fd\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Siemens SIPROTEC 5\u662f\u4e00\u6b3e\u591a\u529f\u80fd\u7ee7\u7535\u5668\u3002Siemens DIGISI 5\u662f\u4e00\u5957\u7528\u4e8eSiemens SIPROTEC\u8bbe\u5907\u7684\u7528\u6237\u754c\u9762\u3002\n\n\u591a\u6b3eSiemens\u4ea7\u54c1\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u4ee5\u4f7f\u7528\u53d1\u9001\u5230\u7aef\u53e3443/TCP\u7684\u7279\u5236\u6570\u636e\u5305\u4e0a\u4f20\u3001\u4e0b\u8f7d\u6216\u5220\u9664\u6587\u4ef6\u7cfb\u7edf\u67d0\u4e9b\u90e8\u5206\u4e2d\u7684\u6587\u4ef6\u3002",
  "discovererName": "Siemens",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-22237",
  "openTime": "2019-07-12",
  "patchDescription": "Siemens SIPROTEC 5\u548cSiemens DIGISI 5\u90fd\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Siemens SIPROTEC 5\u662f\u4e00\u6b3e\u591a\u529f\u80fd\u7ee7\u7535\u5668\u3002Siemens DIGISI 5\u662f\u4e00\u5957\u7528\u4e8eSiemens SIPROTEC\u8bbe\u5907\u7684\u7528\u6237\u754c\u9762\u3002\r\n\r\n\u591a\u6b3eSiemens\u4ea7\u54c1\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u4ee5\u4f7f\u7528\u53d1\u9001\u5230\u7aef\u53e3443/TCP\u7684\u7279\u5236\u6570\u636e\u5305\u4e0a\u4f20\u3001\u4e0b\u8f7d\u6216\u5220\u9664\u6587\u4ef6\u7cfb\u7edf\u67d0\u4e9b\u90e8\u5206\u4e2d\u7684\u6587\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eSiemens\u4ea7\u54c1\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens DIGSI 5 \u003c V7.90",
      "Siemens SIPROTEC 5"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf",
  "serverity": "\u9ad8",
  "submitTime": "2019-07-10",
  "title": "\u591a\u6b3eSiemens\u4ea7\u54c1\u5b58\u5728\u672a\u660e\u6f0f\u6d1e"
}

CVE-2019-10930 (GCVE-0-2019-10930)

Vulnerability from cvelistv5

Published

2019-07-11 21:17

Modified

2024-08-04 22:40

Severity ?

CWE

CWE-552 - Files or Directories Accessible to External Parties

Summary

A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions < V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), SIPROTEC 5 device types 7SS85 and 7KE85 (All versions < V8.01), SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules (All versions). A remote attacker could use specially crafted packets sent to port 443/TCP to upload, download or delete files in certain parts of the file system.

References

▼	URL	Tags
	https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf	x_refsource_MISC

Impacted products

Vendor

Product

Version

▼

Siemens AG

All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules

Version: All versions

Siemens AG	DIGSI 5 engineering software	Version: All versions < V7.90
Siemens AG	SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules	Version: All versions < V7.90
Siemens AG	SIPROTEC 5 device types 7SS85 and 7KE85	Version: All versions < V8.01
Siemens AG	SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules	Version: All versions

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:15.221Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules",
          "vendor": "Siemens AG",
          "versions": [
            {
              "status": "affected",
              "version": "All versions "
            }
          ]
        },
        {
          "product": "DIGSI 5 engineering software",
          "vendor": "Siemens AG",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V7.90"
            }
          ]
        },
        {
          "product": "SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules",
          "vendor": "Siemens AG",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V7.90"
            }
          ]
        },
        {
          "product": "SIPROTEC 5 device types 7SS85 and 7KE85",
          "vendor": "Siemens AG",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V8.01"
            }
          ]
        },
        {
          "product": "SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules",
          "vendor": "Siemens AG",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions \u003c V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions \u003c V7.90), SIPROTEC 5 device types 7SS85 and 7KE85 (All versions \u003c V8.01), SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules (All versions). A remote attacker could use specially crafted packets sent to port 443/TCP to upload, download or delete files in certain parts of the file system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-552",
              "description": "CWE-552: Files or Directories Accessible to External Parties",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-06-10T16:13:01",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2019-10930",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions "
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "DIGSI 5 engineering software",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V7.90"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V7.90"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPROTEC 5 device types 7SS85 and 7KE85",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V8.01"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens AG"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions \u003c V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions \u003c V7.90), SIPROTEC 5 device types 7SS85 and 7KE85 (All versions \u003c V8.01), SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules (All versions). A remote attacker could use specially crafted packets sent to port 443/TCP to upload, download or delete files in certain parts of the file system."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-552: Files or Directories Accessible to External Parties"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2019-10930",
    "datePublished": "2019-07-11T21:17:47",
    "dateReserved": "2019-04-08T00:00:00",
    "dateUpdated": "2024-08-04T22:40:15.221Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted