CVE-2019-10939

mediumpriority · track · 39OT risk · elevatedEPSS 0.011 · 66 %ileEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
1.12% (66th) EPSS
CVSS 6.8 · medium
Is it mine?
20 products
Check your exposure
Who says so?
4 sources
cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · scored 2026-10-28

A vulnerability has been identified in TIM 3V-IE (incl. SIPLUS NET variants) (All versions < V2.8), TIM 3V-IE Advanced (incl. SIPLUS NET variants) (All versions < V2.8), TIM 3V-IE DNP3 (incl. SIPLUS NET variants) (All versions < V3.3), TIM 4R-IE (incl. SIPLUS NET variants) (All versions < V2.8), TIM 4R-IE DNP3 (incl. SIPLUS NET variants) (All versions < V3.3). The affected versions contain an open debug port that is available under certain specific conditions. The vulnerability is only available if the IP address is configured to 192.168.1.2. If available, the debug port could be exploited by an attacker with network access to the device. No user interaction is required to exploit this vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the affected device. At the stage of publishing this security advisory no public exploitation is known.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedTIM 3V-IE (incl. SIPLUS NET variants)cisa_csaf_ot

    Update to V2.8

  • FixedTIM 3V-IE Advanced (incl. SIPLUS NET variants)cisa_csaf_ot

    Update to V2.8

  • FixedTIM 3V-IE DNP3 (incl. SIPLUS NET variants)cisa_csaf_ot

    Update to V3.3

  • FixedTIM 4R-IE (incl. SIPLUS NET variants)cisa_csaf_ot

    Update to V2.8

  • FixedTIM 4R-IE DNP3 (incl. SIPLUS NET variants)cisa_csaf_ot

    Update to V3.3

  • MitigationTIM 3V-IE (incl. SIPLUS NET variants)cisa_csaf_ot

    Limit access to port 17185/udp of an affected device (e.g. cell-protection firewall or corporate firewall) to reduce the risk.

  • MitigationTIM 3V-IE Advanced (incl. SIPLUS NET variants)cisa_csaf_ot

    Limit access to port 17185/udp of an affected device (e.g. cell-protection firewall or corporate firewall) to reduce the risk.

  • MitigationTIM 3V-IE DNP3 (incl. SIPLUS NET variants)cisa_csaf_ot

    Limit access to port 17185/udp of an affected device (e.g. cell-protection firewall or corporate firewall) to reduce the risk.

  • MitigationTIM 4R-IE (incl. SIPLUS NET variants)cisa_csaf_ot

    Limit access to port 17185/udp of an affected device (e.g. cell-protection firewall or corporate firewall) to reduce the risk.

  • MitigationTIM 4R-IE DNP3 (incl. SIPLUS NET variants)cisa_csaf_ot

    Limit access to port 17185/udp of an affected device (e.g. cell-protection firewall or corporate firewall) to reduce the risk.

02

cvss

Technical severity, 0–10. One row per scoring source.

9.8
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 6.8–9.8

v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 8.6 · impact 6.4
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9
v3.19criticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US
v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-489USCWE-489US
04

affected products (20)

Products and version ranges known to be affected.

05

advisories (1)

Vendor and ecosystem advisories describing this.

  • ICSA-20-105-09Siemens TIM 3V-IE and 4R-IE Family Devices2020-04-14icsa · cisa_csaf_otUS

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

06

also known as (3)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdcisa_csaf_otnvdNVDCVE.orgMITRE
published 2020-04-14modified 2026-06-17
08

references (6)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan