PT-2019-12090 · Siemens · Siemens Power Meters Series 9810+2
Published
2019-08-02
·
Updated
2020-10-02
·
CVE-2019-10938
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
SIPROTEC 5 devices with CPU variants CP200 versions prior to V7.59
SIPROTEC 5 devices with CPU variants CP300 and CP100 versions prior to V8.01
Siemens Power Meters Series 9410 versions prior to V2.2.1
Siemens Power Meters Series 9810 (affected versions not specified)
Description
A security issue has been identified that allows an unauthenticated attacker with network access to potentially insert arbitrary code, which is executed before firmware verification in the device. There are no known public exploits of this issue at the time of advisory publication.
Recommendations
For SIPROTEC 5 devices with CPU variants CP200, update to version V7.59 or later.
For SIPROTEC 5 devices with CPU variants CP300 and CP100, update to version V8.01 or later.
For Siemens Power Meters Series 9410, update to version V2.2.1 or later.
For Siemens Power Meters Series 9810, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Access Control
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Siprotec 5
Siemens Power Meters Series 9410
Siemens Power Meters Series 9810