CVE-2019-6568

Description

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device.

References

Link	Tags
https://cert-portal.siemens.com/productcert/pdf/ssa-480230.pdf	vendor advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-530931.pdf	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2019-6568?: CVE-2019-6568 has been scored as a high severity vulnerability.
How to fix CVE-2019-6568?: To fix CVE-2019-6568, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2019-6568 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2019-6568 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2019-6568?: CVE-2019-6568 affects Siemens SIMATIC CP 1604, Siemens SIMATIC CP 1616, Siemens SIMATIC CP 343-1 Advanced, Siemens SIMATIC CP 443-1, Siemens SIMATIC CP 443-1, Siemens SIMATIC CP 443-1 Advanced, Siemens SIMATIC CP 443-1 OPC UA, Siemens SIMATIC ET 200pro IM154-8 PN/DP CPU, Siemens SIMATIC ET 200pro IM154-8F PN/DP CPU, Siemens SIMATIC ET 200pro IM154-8FX PN/DP CPU, Siemens SIMATIC ET 200S IM151-8 PN/DP CPU, Siemens SIMATIC ET 200S IM151-8F PN/DP CPU, Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), Siemens SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants), Siemens SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants), Siemens SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F, Siemens SIMATIC IPC DiagMonitor, Siemens SIMATIC RF182C, Siemens SIMATIC RF185C, Siemens SIMATIC RF186C, Siemens SIMATIC RF188C, Siemens SIMATIC RF600R family, Siemens SIMATIC RFID 181EIP, Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), Siemens SIMATIC S7-1500 Software Controller, Siemens SIMATIC S7-300 CPU 314C-2 PN/DP, Siemens SIMATIC S7-300 CPU 315-2 PN/DP, Siemens SIMATIC S7-300 CPU 315F-2 PN/DP, Siemens SIMATIC S7-300 CPU 315T-3 PN/DP, Siemens SIMATIC S7-300 CPU 317-2 PN/DP, Siemens SIMATIC S7-300 CPU 317F-2 PN/DP, Siemens SIMATIC S7-300 CPU 317T-3 PN/DP, Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP, Siemens SIMATIC S7-300 CPU 319-3 PN/DP, Siemens SIMATIC S7-300 CPU 319F-3 PN/DP, Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants), Siemens SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants), Siemens SIMATIC S7-PLCSIM Advanced, Siemens SIMATIC Teleservice Adapter IE Advanced, Siemens SIMATIC Teleservice Adapter IE Basic, Siemens SIMATIC Teleservice Adapter IE Standard, Siemens SIMATIC WinAC RTX 2010, Siemens SIMATIC WinAC RTX F 2010, Siemens SIMATIC WinCC Runtime Advanced, Siemens SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants), Siemens SIMOCODE pro V PROFINET (incl. SIPLUS variants), Siemens SINAMICS G130 V4.6 Control Unit, Siemens SINAMICS G130 V4.7 Control Unit, Siemens SINAMICS G130 V4.7 SP1 Control Unit, Siemens SINAMICS G130 V4.8 Control Unit, Siemens SINAMICS G130 V5.1 Control Unit, Siemens SINAMICS G130 V5.1 SP1 Control Unit, Siemens SINAMICS G150 V4.6 Control Unit, Siemens SINAMICS G150 V4.7 Control Unit, Siemens SINAMICS G150 V4.7 SP1 Control Unit, Siemens SINAMICS G150 V4.8 Control Unit, Siemens SINAMICS G150 V5.1 Control Unit, Siemens SINAMICS G150 V5.1 SP1 Control Unit, Siemens SINAMICS GH150 V4.7 (Control Unit), Siemens SINAMICS GH150 V4.8 (Control Unit), Siemens SINAMICS GL150 V4.7 (Control Unit), Siemens SINAMICS GL150 V4.8 (Control Unit), Siemens SINAMICS GM150 V4.7 (Control Unit), Siemens SINAMICS GM150 V4.8 (Control Unit), Siemens SINAMICS S120 V4.6 Control Unit (incl. SIPLUS variants), Siemens SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants), Siemens SINAMICS S120 V4.7 SP1 Control Unit (incl. SIPLUS variants), Siemens SINAMICS S120 V4.8 Control Unit (incl. SIPLUS variants), Siemens SINAMICS S120 V5.1 Control Unit (incl. SIPLUS variants), Siemens SINAMICS S120 V5.1 SP1 Control Unit (incl. SIPLUS variants), Siemens SINAMICS S150 V4.6 Control Unit, Siemens SINAMICS S150 V4.7 Control Unit, Siemens SINAMICS S150 V4.7 SP1 Control Unit, Siemens SINAMICS S150 V4.8 Control Unit, Siemens SINAMICS S150 V5.1 Control Unit, Siemens SINAMICS S150 V5.1 SP1 Control Unit, Siemens SINAMICS S210, Siemens SINAMICS SL150 V4.7 (Control Unit), Siemens SINAMICS SL150 V4.8 (Control Unit), Siemens SINAMICS SM120 V4.7 (Control Unit), Siemens SINAMICS SM120 V4.8 (Control Unit), Siemens SINAMICS SM150 V4.8 (Control Unit), Siemens SIPLUS ET 200S IM151-8 PN/DP CPU, Siemens SIPLUS ET 200S IM151-8F PN/DP CPU, Siemens SIPLUS NET CP 343-1 Advanced, Siemens SIPLUS NET CP 443-1, Siemens SIPLUS NET CP 443-1 Advanced, Siemens SIPLUS S7-300 CPU 314C-2 PN/DP, Siemens SIPLUS S7-300 CPU 315-2 PN/DP, Siemens SIPLUS S7-300 CPU 315F-2 PN/DP, Siemens SIPLUS S7-300 CPU 317-2 PN/DP, Siemens SIPLUS S7-300 CPU 317F-2 PN/DP, Siemens SITOP Manager, Siemens SITOP PSU8600, Siemens SITOP UPS1600 (incl. SIPLUS variants), Siemens TIM 1531 IRC (incl. SIPLUS NET variants).

Description

Category

CWE-125 – Out-of-bounds Read

References

Frequently Asked Questions