CVE-2019-10930 | ByteOS Network

Vulnerability Details :

CVE-2019-10930

Assigner-siemens

Assigner Org ID-cec7a2ec-15b4-4faf-bd53-b40f371f3a77

Published At-11 Jul, 2019 | 21:17

Updated At-04 Aug, 2024 | 22:40

A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions < V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), SIPROTEC 5 device types 7SS85 and 7KE85 (All versions < V8.01), SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules (All versions). A remote attacker could use specially crafted packets sent to port 443/TCP to upload, download or delete files in certain parts of the file system.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:siemens

Assigner Org ID:cec7a2ec-15b4-4faf-bd53-b40f371f3a77

Published At:11 Jul, 2019 | 21:17

Updated At:04 Aug, 2024 | 22:40

▼CVE Numbering Authority (CNA)

A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions < V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), SIPROTEC 5 device types 7SS85 and 7KE85 (All versions < V8.01), SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules (All versions). A remote attacker could use specially crafted packets sent to port 443/TCP to upload, download or delete files in certain parts of the file system.

Affected Products

Vendor

Product

All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules

Versions

Affected

All versions

Vendor

Product

DIGSI 5 engineering software

Versions

Affected

All versions < V7.90

Vendor

Product

SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules

Versions

Affected

All versions < V7.90

Vendor

Product

SIPROTEC 5 device types 7SS85 and 7KE85

Versions

Affected

All versions < V8.01

Vendor

Product

SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules

Versions

Affected

All versions

Problem Types

Type	CWE ID	Description
CWE	CWE-552	CWE-552: Files or Directories Accessible to External Parties

Type: CWE

CWE ID: CWE-552

Description: CWE-552: Files or Directories Accessible to External Parties

References

Hyperlink	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf	x_refsource_MISC

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf	x_refsource_MISC x_transferred

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

Source:productcert@siemens.com

Published At:11 Jul, 2019 | 22:15

Updated At:10 Jun, 2020 | 17:15

A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions < V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), SIPROTEC 5 device types 7SS85 and 7KE85 (All versions < V8.01), SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules (All versions). A remote attacker could use specially crafted packets sent to port 443/TCP to upload, download or delete files in certain parts of the file system.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Primary	2.0	6.4	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:P

Type: Primary

Version: 3.0

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Type: Primary

Version: 2.0

Base score: 6.4

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:N/I:P/A:P

CPE Matches

>>6md85>>-

cpe:2.3:h:siemens:6md85:-:*:*:*:*:*:*:*

>>6md86>>-

cpe:2.3:h:siemens:6md86:-:*:*:*:*:*:*:*

>>6md89>>-

cpe:2.3:h:siemens:6md89:-:*:*:*:*:*:*:*

>>7sa82>>-

cpe:2.3:h:siemens:7sa82:-:*:*:*:*:*:*:*

>>7sa86>>-

cpe:2.3:h:siemens:7sa86:-:*:*:*:*:*:*:*

>>7sa87>>-

cpe:2.3:h:siemens:7sa87:-:*:*:*:*:*:*:*

>>7sd82>>-

cpe:2.3:h:siemens:7sd82:-:*:*:*:*:*:*:*

>>7sd86>>-

cpe:2.3:h:siemens:7sd86:-:*:*:*:*:*:*:*

>>7sd87>>-

cpe:2.3:h:siemens:7sd87:-:*:*:*:*:*:*:*

>>7sj82>>-

cpe:2.3:h:siemens:7sj82:-:*:*:*:*:*:*:*

>>7sj85>>-

cpe:2.3:h:siemens:7sj85:-:*:*:*:*:*:*:*

>>7sj86>>-

cpe:2.3:h:siemens:7sj86:-:*:*:*:*:*:*:*

>>7sk82>>-

cpe:2.3:h:siemens:7sk82:-:*:*:*:*:*:*:*

>>7sk85>>-

cpe:2.3:h:siemens:7sk85:-:*:*:*:*:*:*:*

>>7sl82>>-

cpe:2.3:h:siemens:7sl82:-:*:*:*:*:*:*:*

>>7sl86>>-

cpe:2.3:h:siemens:7sl86:-:*:*:*:*:*:*:*

>>7sl87>>-

cpe:2.3:h:siemens:7sl87:-:*:*:*:*:*:*:*

>>7um85>>-

cpe:2.3:h:siemens:7um85:-:*:*:*:*:*:*:*

>>7ut82>>-

cpe:2.3:h:siemens:7ut82:-:*:*:*:*:*:*:*

>>7ut85>>-

cpe:2.3:h:siemens:7ut85:-:*:*:*:*:*:*:*

>>7ut86>>-

cpe:2.3:h:siemens:7ut86:-:*:*:*:*:*:*:*

>>7ut87>>-

cpe:2.3:h:siemens:7ut87:-:*:*:*:*:*:*:*

>>7ve85>>-

cpe:2.3:h:siemens:7ve85:-:*:*:*:*:*:*:*

>>7vk87>>-

cpe:2.3:h:siemens:7vk87:-:*:*:*:*:*:*:*

>>digsi_5_engineering_software>>7.90

cpe:2.3:a:siemens:digsi_5_engineering_software:7.90:*:*:*:*:*:*:*

>>siprotec_5_digsi_device_driver>>7.90

cpe:2.3:a:siemens:siprotec_5_digsi_device_driver:7.90:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-434	Primary	nvd@nist.gov
CWE-552	Secondary	productcert@siemens.com

CWE ID: CWE-434

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-552

Type: Secondary

Source: productcert@siemens.com

References

Hyperlink	Source	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf	productcert@siemens.com	Vendor Advisory

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf

Source: productcert@siemens.com

Resource:

Vendor Advisory

Similar CVEs

52Records found

Matching Score-4

Assigner-Larry Cashdollar

Matching Score-4

Assigner-Larry Cashdollar

CVSS Score-7.5||HIGH

EPSS-38.60% / 97.25%

||

7 Day CHG~0.00%

Published-02 Mar, 2017 | 22:00

Updated-20 Apr, 2025 | 01:37

Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.

Vendor-zen_mobile_app_native_project zendkmobileapp

Product-zen_mobile_app_native Wordpress Plugin Mobile App Native 3.0

CWE ID-CWE-287

Improper Authentication

CWE ID-CWE-434

Unrestricted Upload of File with Dangerous Type

CWE ID-CWE-732

Incorrect Permission Assignment for Critical Resource

Matching Score-4

Assigner-Red Hat, Inc.

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.34% / 56.88%

||

7 Day CHG~0.00%

Published-26 May, 2021 | 18:03

Updated-05 Aug, 2024 | 07:46

Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user.

Vendor-n/a Red Hat, Inc.

Product-certification redhat-certification

CWE ID-CWE-552

Files or Directories Accessible to External Parties