CVE-2019-6575

highpriority · track · 31EPSS 0.016 · 76 %ileDEEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.65% (76th) EPSS
CVSS 7.8 · high
Is it mine?
141 products
Check your exposure
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-24

A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.7), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants) (All versions < V15.1 Upd 4), SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants) (All versions < V15.1 Upd 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Upd 4), SIMATIC IPC DiagMonitor (All versions < V5.1.3), SIMATIC NET PC Software V13 (All versions), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC RF188C (All versions < V1.1.0), SIMATIC RF600R family (All versions < V3.2.1), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 < V2.6.1), SIMATIC S7-1500 Software Controller (All versions between V2.5 (including) and V2.7 (excluding)), SIMATIC WinCC OA (All versions < V3.15 P018), SIMATIC WinCC Runtime Advanced (All versions < V15.1 Upd 4), SINEC NMS (All versions < V1.0 SP1), SINEMA Server (All versions < V14 SP2), SINUMERIK OPC UA Server (All versions < V2.1), TeleControl Server Basic (All versions < V3.1.1). Specially crafted network packets sent to affected devices on port 4840/tcp could allow an unauthenticated remote attacker to cause a denial of service condition of the OPC communication or crash the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the OPC communication.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)siemens_psirt

    Update to V2.7 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109759122
  • FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)siemens_psirt

    Update to V15.1 Upd4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763890
  • FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)siemens_psirt

    Update to V15.1 Upd4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763890
  • FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900Fsiemens_psirt

    Update to V15.1 Upd4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763890
  • FixedSIMATIC IPC DiagMonitorsiemens_psirt

    Update to V5.1.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763202
  • FixedSIMATIC NET PC Software V14siemens_psirt

    Update to V14 SP1 Update 14 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109807351/
  • FixedSIMATIC RF188Csiemens_psirt

    Update to V1.1.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109768507
  • FixedSIMATIC RF600R familysiemens_psirt

    Update to V3.2.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109768501
  • FixedSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)siemens_psirt

    Update to V2.6.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109478459/
  • FixedSIMATIC S7-1500 Software Controllersiemens_psirt

    Update to V2.7 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109478528
  • FixedSIMATIC WinCC OAsiemens_psirt

    Update to V3.15 P018 or later version

    https://www.winccoa.com/downloads/category/versions- patches.html
  • FixedSIMATIC WinCC Runtime Advancedsiemens_psirt

    Update to V15.1 Upd 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763891
  • FixedSINEC NMSsiemens_psirt

    Update to V1.0 SP1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109776939
  • FixedSINEMA Serversiemens_psirt

    Update to V14 SP2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109767382
  • FixedSINUMERIK OPC UA Serversiemens_psirt

    Update to V2.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109746207
  • FixedTeleControl Server Basicsiemens_psirt

    Update to V3.1.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109812231/
  • FixedSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)cisa_csaf_ot

    Update to V2.7 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109759122
  • FixedSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)cisa_csaf_ot

    Update to V15.1 Upd4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763890
  • FixedSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)cisa_csaf_ot

    Update to V15.1 Upd4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763890
  • FixedSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900Fcisa_csaf_ot

    Update to V15.1 Upd4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763890
  • FixedSIMATIC IPC DiagMonitorcisa_csaf_ot

    Update to V5.1.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763202
  • FixedSIMATIC NET PC Software V14cisa_csaf_ot

    Update to V14 SP1 Update 14 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109807351/
  • FixedSIMATIC RF188Ccisa_csaf_ot

    Update to V1.1.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109768507
  • FixedSIMATIC RF600R familycisa_csaf_ot

    Update to V3.2.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109768501
  • FixedSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)cisa_csaf_ot

    Update to V2.6.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109478459/
  • FixedSIMATIC S7-1500 Software Controllercisa_csaf_ot

    Update to V2.7 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109478528
  • FixedSIMATIC WinCC OAcisa_csaf_ot

    Update to V3.15 P018 or later version

    https://www.winccoa.com/downloads/category/versions-patches.html
  • FixedSIMATIC WinCC Runtime Advancedcisa_csaf_ot

    Update to V15.1 Upd 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763891
  • FixedSINEC NMScisa_csaf_ot

    Update to V1.0 SP1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109776939
  • FixedSINEMA Servercisa_csaf_ot

    Update to V14 SP2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109767382
  • FixedSINUMERIK OPC UA Servercisa_csaf_ot

    Update to V2.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109746207
  • FixedTeleControl Server Basiccisa_csaf_ot

    Update to V3.1.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109812231/
  • MitigationSIMATIC CP 443-1 OPC UAsiemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)siemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)siemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)siemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900Fsiemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC IPC DiagMonitorsiemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC NET PC Software V13siemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC NET PC Software V14siemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC NET PC Software V15siemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC RF188Csiemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC RF600R familysiemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)siemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC S7-1500 Software Controllersiemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC WinCC OAsiemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC WinCC Runtime Advancedsiemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSINEC NMSsiemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSINEMA Serversiemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSINUMERIK OPC UA Serversiemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationTeleControl Server Basicsiemens_psirt

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC CP 443-1 OPC UAcisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)cisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)cisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)cisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900Fcisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC IPC DiagMonitorcisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC NET PC Software V13cisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC NET PC Software V14cisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC NET PC Software V15cisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC RF188Ccisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC RF600R familycisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)cisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC S7-1500 Software Controllercisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC WinCC OAcisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC WinCC Runtime Advancedcisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSINEC NMScisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSINEMA Servercisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSINUMERIK OPC UA Servercisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationTeleControl Server Basiccisa_csaf_ot

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial- security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

  • MitigationSIMATIC CP 443-1 OPC UAcisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)cisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)cisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)cisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900Fcisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC IPC DiagMonitorcisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC NET PC Software V13cisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC NET PC Software V14cisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC NET PC Software V15cisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC RF188Ccisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC RF600R familycisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)cisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC S7-1500 Software Controllercisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC WinCC OAcisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSIMATIC WinCC Runtime Advancedcisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSINEC NMScisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSINEMA Servercisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationSINUMERIK OPC UA Servercisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • MitigationTeleControl Server Basiccisa_csaf_ot

    Deactivate the OPC UA Service if supported by the product

  • No fix plannedSIMATIC CP 443-1 OPC UAsiemens_psirt

    Currently no fix is planned

  • No fix plannedSIMATIC NET PC Software V13siemens_psirt

    Currently no fix is planned

  • No fix plannedSIMATIC NET PC Software V15siemens_psirt

    Currently no fix is planned

  • No fix plannedSIMATIC CP 443-1 OPC UAcisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIMATIC NET PC Software V13cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIMATIC NET PC Software V15cisa_csaf_ot

    Currently no fix is planned

02

cvss

Technical severity, 0–10. One row per scoring source.

7.8
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.8

v2.07.8highAV:N/AC:L/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USexploitability 10 · impact 6.9
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · CISA US
v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondaryexploitability 3.9 · impact 3.6
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE
v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20USCWE-248USCWE-248USCWE-248USCWE-755US
05

affected products (141)

Products and version ranges known to be affected.

showing 20 of 141
06

advisories (3)

Vendor and ecosystem advisories describing this.

  • SSA-307392SSA-307392: Denial of Service in OPC UA in Industrial Products2019-04-09csaf · siemens_psirtDE

    A vulnerability has been identified in the OPC UA server of several industrial products. The vulnerability could cause a denial of service condition on the service or the device. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

  • ICSA-19-099-03Siemens Industrial Products with OPC UA (Update H)2019-04-09icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability could cause a denial-of-service condition on the affected service or device.

  • ICSA-19-134-09Siemens SIMATIC Panels and WinCC (TIA Portal)2019-04-09icsa · cisa_csaf_otUS

    A vulnerability has been identified in the OPC UA server of several industrial products. The vulnerability could cause a denial of service condition on the service or the device. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

07

also known as (4)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bducisa_csaf_otsiemens_psirtNVDCVE.orgMITRE
published 2019-04-17modified 2026-06-17
09

references (11)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan