icsa-17-187-03f
Vulnerability from csaf_cisa
Published
2017-07-06 00:00
Modified
2018-03-20 00:00
Summary
Siemens SIPROTEC 4 and SIPROTEC Compact (Update F)

Notes

CISA Disclaimer
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
ATTENTION: Remotely exploitable/low skill level to exploit.
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
NCCIC recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:
Recommended Practices
NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available in the NCCIC Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT website.
Recommended Practices
Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.
Recommended Practices
In addition, NCCIC recommends that users take the following measures to protect themselves from social engineering attacks:
Additional Resources
For further inquiries on vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Additional Resources
For further inquiries on vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Exploitability
No known public exploits specifically target these vulnerabilities.


To clipboard 

{
  "document": {
    "acknowledgments": [
      {
        "organization": "Siemens",
        "summary": "reporting these vulnerabilities to NCCIC when they made firmware available to fix them"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
        "title": "CISA Disclaimer"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "ATTENTION: Remotely exploitable/low skill level to exploit.",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Germany",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "NCCIC recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available in the NCCIC Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT website.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "In addition, NCCIC recommends that users take the following measures to protect themselves from social engineering attacks:",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "For further inquiries on vulnerabilities in Siemens products and solutions,\nplease contact the Siemens ProductCERT:\n\nhttps://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "general",
        "text": "For further inquiries on vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "other",
        "text": "No known public exploits specifically target these vulnerabilities.",
        "title": "Exploitability"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-187-03F JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-187-03f.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-187-03F Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-187-03f"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-187-03f"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/"
      },
      {
        "category": "external",
        "summary": "SSA-496604: SSA-323211: Vulnerabilities in SIPROTEC 4 and SIPROTEC Compact Devices - TXT Version",
        "url": "https://cert-portal.siemens.com/productcert/txt/SSA-323211.txt"
      }
    ],
    "title": "Siemens SIPROTEC 4 and SIPROTEC Compact (Update F)",
    "tracking": {
      "current_release_date": "2018-03-20T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-17-187-03F",
      "initial_release_date": "2017-07-06T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2017-07-06T00:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "ICSA-17-187-03 Siemens SIPROTEC 4 and SIPROTEC Compact Devices"
        },
        {
          "date": "2017-07-18T00:00:00.000000Z",
          "legacy_version": "A",
          "number": "2",
          "summary": "ICSA-17-187-03A Siemens SIPROTEC 4 and SIPROTEC Compact (Update A)"
        },
        {
          "date": "2017-07-27T00:00:00.000000Z",
          "legacy_version": "B",
          "number": "3",
          "summary": "ICSA-17-187-03B Siemens SIPROTEC 4 and SIPROTEC Compact (Update B)"
        },
        {
          "date": "2017-10-10T00:00:00.000000Z",
          "legacy_version": "C",
          "number": "4",
          "summary": "ICSA-17-187-03C Siemens SIPROTEC 4 and SIPROTEC Compact (Update C)"
        },
        {
          "date": "2017-11-30T00:00:00.000000Z",
          "legacy_version": "D",
          "number": "5",
          "summary": "ICSA-17-187-03D Siemens SIPROTEC 4 and SIPROTEC Compact (Update D)"
        },
        {
          "date": "2018-01-04T00:00:00.000000Z",
          "legacy_version": "E",
          "number": "6",
          "summary": "ICSA-17-187-03E Siemens SIPROTEC 4 and SIPROTEC Compact (Update E)"
        },
        {
          "date": "2018-03-20T00:00:00.000000Z",
          "legacy_version": "F",
          "number": "7",
          "summary": "ICSA-17-187-03F Siemens SIPROTEC 4 and SIPROTEC Compact (Update F)"
        }
      ],
      "status": "final",
      "version": "7"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V1.04.01",
                "product": {
                  "name": "Firmware variant PROFINET IO for EN100 Ethernet module: All versions \u003c V1.04.01",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "Firmware variant PROFINET IO for EN100 Ethernet module"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V1.11.00",
                "product": {
                  "name": "Firmware variant Modbus TCP for EN100 Ethernet module: All versions \u003c V1.11.00",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "Firmware variant Modbus TCP for EN100 Ethernet module"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V1.03",
                "product": {
                  "name": "Firmware variant DNP3 TCP for EN100 Ethernet module: All versions \u003c V1.03",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "Firmware variant DNP3 TCP for EN100 Ethernet module"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V1.21",
                "product": {
                  "name": "Firmware variant IEC 104 for EN100 Ethernet module: All versions \u003c V1.21",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "Firmware variant IEC 104 for EN100 Ethernet module"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c 1.02.02",
                "product": {
                  "name": "EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80: All versions \u003c 1.02.02",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V 4.83",
                "product": {
                  "name": "SIPROTEC 7SJ686: All versions \u003c V 4.83",
                  "product_id": "CSAFPID-0006"
                }
              }
            ],
            "category": "product_name",
            "name": "SIPROTEC 7SJ686"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V 4.87",
                "product": {
                  "name": "SIPROTEC 7SJ686: All versions \u003c V 4.87",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "SIPROTEC 7SJ686"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V 4.01",
                "product": {
                  "name": "SIPROTEC 7UT686: All versions \u003c V 4.01",
                  "product_id": "CSAFPID-0008"
                }
              }
            ],
            "category": "product_name",
            "name": "SIPROTEC 7UT686"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V 4.02",
                "product": {
                  "name": "SIPROTEC 7UT686: All versions \u003c V 4.02",
                  "product_id": "CSAFPID-0009"
                }
              }
            ],
            "category": "product_name",
            "name": "SIPROTEC 7UT686"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V 4.03",
                "product": {
                  "name": "SIPROTEC 7SD686: All versions \u003c V 4.03",
                  "product_id": "CSAFPID-00010"
                }
              }
            ],
            "category": "product_name",
            "name": "SIPROTEC 7SD686"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V 4.05",
                "product": {
                  "name": "SIPROTEC 7SD686: All versions \u003c V 4.05",
                  "product_id": "CSAFPID-00011"
                }
              }
            ],
            "category": "product_name",
            "name": "SIPROTEC 7SD686"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V 4.20",
                "product": {
                  "name": "SIPROTEC 7SJ66: All versions \u003c V 4.20",
                  "product_id": "CSAFPID-00012"
                }
              }
            ],
            "category": "product_name",
            "name": "SIPROTEC 7SJ66"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V 4.30",
                "product": {
                  "name": "SIPROTEC 7SJ66: All versions \u003c V 4.30",
                  "product_id": "CSAFPID-00013"
                }
              }
            ],
            "category": "product_name",
            "name": "SIPROTEC 7SJ66"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-5374",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. A manual reboot may be required to recover the service of the device.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-00010",
          "CSAFPID-00011",
          "CSAFPID-00012",
          "CSAFPID-00013"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "https://support.industry.siemens.com/cs/us/en/view/109743555",
          "url": "https://support.industry.siemens.com/cs/us/en/view/109743555"
        },
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5374"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Apply secure substation concept and Defense-in-Depth (see\nhttps://www.siemens.com/gridsecurity)",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Restrict network access to port 80/TCP and port 50000/UDP",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0002"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0003"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0004"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "mitigation",
          "details": "As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment. Recommended security guidelines to Secure Substations can be found at: https://www.siemens.com/gridsecurity",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:H/RL:O/RC:C",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2016-4784",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The integrated web server (port 80/tcp) of the affected devices could allow remote attackers to obtain sensitive device information if network access was obtained.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-00010",
          "CSAFPID-00011",
          "CSAFPID-00012",
          "CSAFPID-00013"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "https://support.industry.siemens.com/cs/us/en/view/109743555",
          "url": "https://support.industry.siemens.com/cs/us/en/view/109743555"
        },
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4784"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Apply secure substation concept and Defense-in-Depth (see\nhttps://www.siemens.com/gridsecurity)",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Restrict network access to port 80/TCP and port 50000/UDP",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0002"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0003"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0004"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V 4.83 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=51 ",
          "product_ids": [
            "CSAFPID-0006"
          ],
          "url": "http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=51"
        },
        {
          "category": "vendor_fix",
          "details": "Install V 4.01 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=68 ",
          "product_ids": [
            "CSAFPID-0008"
          ],
          "url": "http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=68"
        },
        {
          "category": "vendor_fix",
          "details": "Install V 4.03 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=64 ",
          "product_ids": [
            "CSAFPID-00010"
          ],
          "url": "http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=64"
        },
        {
          "category": "vendor_fix",
          "details": "Install V 4.20 - Download: https://support.industry.siemens.com/cs/gb/en/view/109743555 ",
          "product_ids": [
            "CSAFPID-00012"
          ],
          "url": "https://support.industry.siemens.com/cs/gb/en/view/109743555"
        },
        {
          "category": "mitigation",
          "details": "As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment. Recommended security guidelines to Secure Substations can be found at: https://www.siemens.com/gridsecurity",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2016-4785",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The integrated web server (port 80/tcp) of the affected devices could allow remoteattackers to obtain a limited amount of device memory content if network access was obtained. This vulnerability only affects EN100 Ethernet module included in SIPROTEC4 and SIPROTEC Compact devices.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-00010",
          "CSAFPID-00011",
          "CSAFPID-00012",
          "CSAFPID-00013"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "https://support.industry.siemens.com/cs/us/en/view/109743555",
          "url": "https://support.industry.siemens.com/cs/us/en/view/109743555"
        },
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4785"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Apply secure substation concept and Defense-in-Depth (see\nhttps://www.siemens.com/gridsecurity)",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Restrict network access to port 80/TCP and port 50000/UDP",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0002"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0003"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0004"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "mitigation",
          "details": "As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment. Recommended security guidelines to Secure Substations can be found at: https://www.siemens.com/gridsecurity",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2016-7112",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Attackers with network access to the device\u0027s web interface (port 80/tcp) could possibly circumvent authentication and perform certain administrative operations.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-00010",
          "CSAFPID-00011",
          "CSAFPID-00012",
          "CSAFPID-00013"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "https://support.industry.siemens.com/cs/us/en/view/109743555",
          "url": "https://support.industry.siemens.com/cs/us/en/view/109743555"
        },
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7112"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Apply secure substation concept and Defense-in-Depth (see\nhttps://www.siemens.com/gridsecurity)",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Restrict network access to port 80/TCP and port 50000/UDP",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0002"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0003"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0004"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "mitigation",
          "details": "As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment. Recommended security guidelines to Secure Substations can be found at: https://www.siemens.com/gridsecurity",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2016-7113",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Specially crafted packets sent to port 80/tcp could cause the affected device to go into defect mode.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-00010",
          "CSAFPID-00011",
          "CSAFPID-00012",
          "CSAFPID-00013"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "https://support.industry.siemens.com/cs/us/en/view/109743555",
          "url": "https://support.industry.siemens.com/cs/us/en/view/109743555"
        },
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7113"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Apply secure substation concept and Defense-in-Depth (see\nhttps://www.siemens.com/gridsecurity)",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Restrict network access to port 80/TCP and port 50000/UDP",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0002"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0003"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0004"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "mitigation",
          "details": "As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment. Recommended security guidelines to Secure Substations can be found at: https://www.siemens.com/gridsecurity",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2016-7114",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Attackers with network access to the device\u0027s web interface (port 80/tcp) could possibly circumvent authentication and perform certain administrative operations. A legitimate user must be logged into the web interface for the attack to be successful.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-00010",
          "CSAFPID-00011",
          "CSAFPID-00012",
          "CSAFPID-00013"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "https://support.industry.siemens.com/cs/us/en/view/109743555",
          "url": "https://support.industry.siemens.com/cs/us/en/view/109743555"
        },
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7114"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Apply secure substation concept and Defense-in-Depth (see\nhttps://www.siemens.com/gridsecurity)",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Restrict network access to port 80/TCP and port 50000/UDP",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0002"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0003"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821 ",
          "product_ids": [
            "CSAFPID-0004"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109745821"
        },
        {
          "category": "vendor_fix",
          "details": "Install V 4.87 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=51 ",
          "product_ids": [
            "CSAFPID-0007"
          ],
          "url": "http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=51"
        },
        {
          "category": "vendor_fix",
          "details": "Install V4.02 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=68 ",
          "product_ids": [
            "CSAFPID-0009"
          ],
          "url": "http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=68"
        },
        {
          "category": "vendor_fix",
          "details": "Install V4.05 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=64 ",
          "product_ids": [
            "CSAFPID-00011"
          ],
          "url": "http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=64"
        },
        {
          "category": "vendor_fix",
          "details": "Install V 4.30 - Download: https://support.industry.siemens.com/cs/us/en/view/109743555 ",
          "product_ids": [
            "CSAFPID-00013"
          ],
          "url": "https://support.industry.siemens.com/cs/us/en/view/109743555"
        },
        {
          "category": "mitigation",
          "details": "As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment. Recommended security guidelines to Secure Substations can be found at: https://www.siemens.com/gridsecurity",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ]
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.