PT-2019-4318 · Siemens · Desigo Px

Publicado 2019-11-12 · Atualizado 2019-12-30 · CVE-2019-13927

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 versions prior to V6.00.320 Desigo PX automation controllers PXC00-U, PXC64-U, PXC128-U with Desigo PX Web modules PXA30-W0, PXA30-W1, PXA30-W2 versions prior to V6.00.320 Desigo PX automation controllers PXC22.1-E.D, PXC36-E.D, PXC36.1-E.D with activated web server versions prior to V6.00.320

Description The device contains a vulnerability that could allow an attacker to cause a denial of service condition on the device's web server by sending a specially crafted HTTP message to the web server port (tcp/80). The security issue is related to incorrect input verification by the PX Web service. Successful exploitation requires no system privileges and no user interaction, allowing an attacker with network access to compromise the availability of the device's web service. While the device itself stays operational, the web server responds with HTTP status code 404 (Not found) to any further request. A reboot is required to recover the web interface.

Recommendations For Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 versions prior to V6.00.320: Update to version V6.00.320 or later to resolve the issue. For Desigo PX automation controllers PXC00-U, PXC64-U, PXC128-U with Desigo PX Web modules PXA30-W0, PXA30-W1, PXA30-W2 versions prior to V6.00.320: Update to version V6.00.320 or later to resolve the issue. For Desigo PX automation controllers PXC22.1-E.D, PXC36-E.D, PXC36.1-E.D with activated web server versions prior to V6.00.320: Update to version V6.00.320 or later to resolve the issue. As a temporary workaround, consider restricting access to the web server port (tcp/80) to minimize the risk of exploitation.

Correção

Exposure of Resource to Wrong Sphere

Enumeração de Fraquezas

CWE-668

CWE-472

Identificadores relacionados

BDU:2020-00033

CVE-2019-13927

Produtos afetados

Desigo Px

Referências · 4

• https://bdu.fstec.ru/vul/2020-00033 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-13927 · Nota de Segurança
• https://cert-portal.siemens.com/productcert/pdf/ssa-898181.pdf · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-13927 · Aviso do Fabricante