cnvd - cnvd-2019-44771

cnvd-2019-44771

Vulnerability from cnvd

Title: Siemens SPPA-T3000不当身份验证漏洞

Description:

SPPA-T3000是一种分布式控制系统，主要应用于火力发电厂和大型可再生能源发电厂。

Siemens SPPA-T3000存在安全漏洞。允许具有MS3000服务器网络访问权限的攻击者可以通过向端口5010/tcp发送精心编制的数据包来读取和写入本地文件系统上的任意文件。

Severity: 高

Patch Name: Siemens SPPA-T3000不当身份验证漏洞的补丁

Patch Description:

SPPA-T3000是一种分布式控制系统，主要应用于火力发电厂和大型可再生能源发电厂。

Siemens SPPA-T3000存在安全漏洞。允许具有MS3000服务器网络访问权限的攻击者可以通过向端口5010/tcp发送精心编制的数据包来读取和写入本地文件系统上的任意文件。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf

Reference: https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf

Impacted products

Name
Siemens SPPA-T3000 MS3000 Migration Server

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-18322"
    }
  },
  "description": "SPPA-T3000\u662f\u4e00\u79cd\u5206\u5e03\u5f0f\u63a7\u5236\u7cfb\u7edf\uff0c\u4e3b\u8981\u5e94\u7528\u4e8e\u706b\u529b\u53d1\u7535\u5382\u548c\u5927\u578b\u53ef\u518d\u751f\u80fd\u6e90\u53d1\u7535\u5382\u3002\n\nSiemens SPPA-T3000\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u5141\u8bb8\u5177\u6709MS3000\u670d\u52a1\u5668\u7f51\u7edc\u8bbf\u95ee\u6743\u9650\u7684\u653b\u51fb\u8005\u53ef\u4ee5\u901a\u8fc7\u5411\u7aef\u53e35010/tcp\u53d1\u9001\u7cbe\u5fc3\u7f16\u5236\u7684\u6570\u636e\u5305\u6765\u8bfb\u53d6\u548c\u5199\u5165\u672c\u5730\u6587\u4ef6\u7cfb\u7edf\u4e0a\u7684\u4efb\u610f\u6587\u4ef6\u3002",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-44771",
  "openTime": "2019-12-11",
  "patchDescription": "SPPA-T3000\u662f\u4e00\u79cd\u5206\u5e03\u5f0f\u63a7\u5236\u7cfb\u7edf\uff0c\u4e3b\u8981\u5e94\u7528\u4e8e\u706b\u529b\u53d1\u7535\u5382\u548c\u5927\u578b\u53ef\u518d\u751f\u80fd\u6e90\u53d1\u7535\u5382\u3002\r\n\r\nSiemens SPPA-T3000\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u5141\u8bb8\u5177\u6709MS3000\u670d\u52a1\u5668\u7f51\u7edc\u8bbf\u95ee\u6743\u9650\u7684\u653b\u51fb\u8005\u53ef\u4ee5\u901a\u8fc7\u5411\u7aef\u53e35010/tcp\u53d1\u9001\u7cbe\u5fc3\u7f16\u5236\u7684\u6570\u636e\u5305\u6765\u8bfb\u53d6\u548c\u5199\u5165\u672c\u5730\u6587\u4ef6\u7cfb\u7edf\u4e0a\u7684\u4efb\u610f\u6587\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens SPPA-T3000\u4e0d\u5f53\u8eab\u4efd\u9a8c\u8bc1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Siemens SPPA-T3000 MS3000 Migration Server"
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf",
  "serverity": "\u9ad8",
  "submitTime": "2019-12-11",
  "title": "Siemens SPPA-T3000\u4e0d\u5f53\u8eab\u4efd\u9a8c\u8bc1\u6f0f\u6d1e"
}

CVE-2019-18322 (GCVE-0-2019-18322)

Vulnerability from cvelistv5

Published

2019-12-12 19:08

Modified

2024-08-05 01:54

Severity ?

CWE

CWE-287 - Improper Authentication

Summary

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could be able to read and write arbitrary files on the local file system by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18321. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

References

▼	URL	Tags
	https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Siemens	SPPA-T3000 MS3000 Migration Server	Version: All versions

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:54:12.859Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SPPA-T3000 MS3000 Migration Server",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could be able to read and write arbitrary files on the local file system by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18321. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-22T17:52:17",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2019-18322",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SPPA-T3000 MS3000 Migration Server",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could be able to read and write arbitrary files on the local file system by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18321. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-287: Improper Authentication"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2019-18322",
    "datePublished": "2019-12-12T19:08:48",
    "dateReserved": "2019-10-23T00:00:00",
    "dateUpdated": "2024-08-05T01:54:12.859Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted