CVE-2019-10923

{"id": "CVE-2019-10923", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "productcert@siemens.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2019-10-10T14:15:14.503", "references": [{"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-349422.pdf", "tags": ["Vendor Advisory"], "source": "productcert@siemens.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "productcert@siemens.com", "description": [{"lang": "en", "value": "CWE-400"}]}, {"type": "Secondary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, SCALANCE X-200IRT switch family (incl. SIPLUS NET variants), SIMATIC ET 200pro IM154-8 PN/DP CPU, SIMATIC ET 200pro IM154-8F PN/DP CPU, SIMATIC ET 200pro IM154-8FX PN/DP CPU, SIMATIC ET 200S IM151-8 PN/DP CPU, SIMATIC ET 200S IM151-8F PN/DP CPU, SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 4AO U/I 4xM12, SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12, SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12, SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN: IO-Link Master, SIMATIC ET200M (incl. SIPLUS variants), SIMATIC ET200pro, SIMATIC ET200S (incl. SIPLUS variants), SIMATIC NET CP 1604, SIMATIC NET CP 1616, SIMATIC PN/PN Coupler (incl. SIPLUS NET variants), SIMATIC S7-300 CPU 314C-2 PN/DP, SIMATIC S7-300 CPU 315-2 PN/DP, SIMATIC S7-300 CPU 315F-2 PN/DP, SIMATIC S7-300 CPU 315T-3 PN/DP, SIMATIC S7-300 CPU 317-2 PN/DP, SIMATIC S7-300 CPU 317F-2 PN/DP, SIMATIC S7-300 CPU 317T-3 PN/DP, SIMATIC S7-300 CPU 317TF-3 PN/DP, SIMATIC S7-300 CPU 319-3 PN/DP, SIMATIC S7-300 CPU 319F-3 PN/DP, SIMATIC S7-400 CPU 412-2 PN V7, SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants), SIMATIC WinAC RTX 2010, SIMATIC WinAC RTX F 2010, SIMOTION, SINAMICS DCM, SINAMICS DCP, SINAMICS G110M V4.7 Control Unit, SINAMICS G120 V4.7 Control Unit (incl. SIPLUS variants), SINAMICS G130 V4.7 Control Unit, SINAMICS G150 Control Unit, SINAMICS GH150 V4.7 Control Unit, SINAMICS GL150 V4.7 Control Unit, SINAMICS GM150 V4.7 Control Unit, SINAMICS S110 Control Unit, SINAMICS S120 V4.7 Control Unit and CBE20 (incl. SIPLUS variants), SINAMICS S150 Control Unit, SINAMICS SL150 V4.7 Control Unit, SINAMICS SM120 V4.7 Control Unit, SINUMERIK 828D, SINUMERIK 840D sl, SIPLUS ET 200S IM151-8 PN/DP CPU, SIPLUS ET 200S IM151-8F PN/DP CPU, SIPLUS S7-300 CPU 314C-2 PN/DP, SIPLUS S7-300 CPU 315-2 PN/DP, SIPLUS S7-300 CPU 315F-2 PN/DP, SIPLUS S7-300 CPU 317-2 PN/DP, SIPLUS S7-300 CPU 317F-2 PN/DP, SIPLUS S7-400 CPU 414-3 PN/DP V7, SIPLUS S7-400 CPU 416-3 PN/DP V7. An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en Development/Evaluation Kits para PROFINET IO: DK Standard Ethernet Controller (Todas las versiones anteriores a la versi\u00f3n V4.1.1 Patch 05), Development/Evaluation Kits para PROFINET IO: EK-ERTEC 200 (Todas las versiones anteriores a la versi\u00f3n V4.5.0 Patch 01), Development/Evaluation Kits para PROFINET IO: EK-ERTEC 200P (Todas las versiones anteriores a la versi\u00f3n V4.5.0), familia de switches SCALANCE X-200IRT (incluidas las variantes SIPLUS NET) (Todas las versiones anteriores a la versi\u00f3n V5.2.1), SIMATIC ET200M (incluidas las variantes SIPLUS) (Todas las versiones), SIMATIC ET200S (incluidas las variantes SIPLUS) (Todas las versiones), SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 (Todas las versiones), SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 (Todas las versiones), SIMATIC ET200ecoPN, 4AO U/I 4xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 (Todas las versiones), SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 (Todas las versiones), SIMATIC ET200ecoPN: IO-Link Master (Todas las versiones), SIMATIC ET200pro (Todas las versiones), SIMATIC NET CP 1604 (Todas las versiones anteriores a la versi\u00f3n V2.8), SIMATIC NET CP 1616 (Todas las versiones anteriores a la versi\u00f3n V2.8), SIMATIC PN/PN Coupler 6ES7158-3AD01-0XA0 (incluida la variante SIPLUS NET) (Todas las versiones), familia SIMATIC S7-300 CPU (incluyendo las variantes relacionadas ET200 CPUs y SIPLUS) (Todas las versiones anteriores a la versi\u00f3n V3.X.17), familia SIMATIC S7-400 PN/DP V6 y anteriores CPU (incluidas las variantes SIPLUS) (Todas las versiones), familia SIMATIC S7-400 PN/DP V7 CPU (incluidas las variantes SIPLUS) (Todas las versiones), SIMATIC WinAC RTX (F) 2010 (Todas las versiones anteriores a la versi\u00f3n SIMATIC WinAC RTX 2010 SP3), SIMOTION (incluidas las variantes SIPLUS) (Todas las versiones), SINAMICS DCM (Todas las versiones anteriores a la versi\u00f3n V1.5 HF1), SINAMICS DCP (Todas las versiones anteriores a la versi\u00f3n V1.3), SINAMICS G110M V4.7 Control Unit (Todas las versiones anteriores a la versi\u00f3n V4.7 SP10 HF5), SINAMICS G120 V4.7 Control Unit (incluidas las variantes SIPLUS) (Todas las versiones anteriores a la versi\u00f3n V4.7 SP10 HF5), SINAMICS G130 V4.7 Control Unit (Todas las versiones anteriores a la versi\u00f3n V4.7 HF29), SINAMICS G150 Control Unit (Todas las versiones anteriores a la versi\u00f3n V4.8), SINAMICS GH150 V4.7 Control Unit (Todas las versiones), SINAMICS GL150 V4.7 Control Unit (Todas las versiones), SINAMICS GM150 V4.7 Control Unit (Todas las versiones), SINAMICS S110 Control Unit (Todas las versiones), SINAMICS S120 V4.7 Control Unit and CBE20 (incluidas las variantes SIPLUS) (Todas las versiones anteriores a la versi\u00f3n V4.7 HF34), SINAMICS S150 Control Unit (Todas las versiones anteriores a la versi\u00f3n V4.8), SINAMICS SL150 V4.7 Control Unit (Todas las versiones anteriores a la versi\u00f3n V4.7 HF33), SINAMICS SM120 V4.7 Control Unit (Todas las versiones), SINUMERIK 828D (Todas las versiones anteriores a la versi\u00f3n V4.8 SP5), SINUMERIK 840D sl (Todas las versiones). Un atacante con acceso de red a un producto afectado puede causar una condici\u00f3n de denegaci\u00f3n de servicio al romper la sincronizaci\u00f3n en tiempo real (IRT) de la instalaci\u00f3n afectada. La vulnerabilidad de seguridad podr\u00eda ser explotada por un atacante no autenticado con acceso de red a la instalaci\u00f3n afectada. No se requiere interacci\u00f3n del usuario para explotar esta vulnerabilidad de seguridad. La vulnerabilidad afecta la disponibilidad de las instalaciones afectadas"}], "lastModified": "2023-05-09T13:15:12.763", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:cp1604_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D00494F-8BC7-44C1-816E-0266920F8659", "versionEndExcluding": "2.8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:cp1604:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6222006F-09D7-49F7-B8C7-4D94298A8F6A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:cp1616_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B1E2552-2661-40FB-A88A-4383064A58F3", "versionEndExcluding": "2.8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:cp1616:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "184365A2-BAD2-4926-ACEE-F71E018D3CE5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0FE40195-DE5A-4B9C-9455-FAF92FF090D0", "versionEndExcluding": "4.1.1"}, {"criteria": "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B339839-3D74-4E13-9EB6-24CA46F991A5"}, {"criteria": "cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:p4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92416826-BD34-4611-A5FE-F315C9E8727F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:dk_standard_ethernet_controller:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "53DF35F1-94FF-4D0B-9FA2-E8B0AFAEA5FF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:ek-ertec_200_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "191FC7FB-791D-44E9-99C8-6CE15C99D057", "versionEndExcluding": "4.5.0"}, {"criteria": "cpe:2.3:o:siemens:ek-ertec_200_firmware:4.5.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F894A35F-CB1A-4653-9157-DBCE16247D09"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:ek-ertec_200:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B47CF3BB-08E4-4B86-B793-8253C172D846"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:ek-ertec_200p_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2859C30-0E12-437E-A07A-7B25D841CFDE", "versionEndExcluding": "4.5.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:ek-ertec_200p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FB75CD44-5223-40A7-A835-111BF3C25D23"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:scalance_x-200irt_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E299AC3-800C-4C27-956A-C7B8DF5F00D0", "versionEndExcluding": "5.2.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:scalance_x-200irt:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "94C7BE35-D3A6-488C-BB3D-D17D65DF4B80"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_et_200m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14E56570-5C20-40BD-BF0B-F6ED06AFC8F7"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_et_200m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7037E46B-4FE5-4693-B6A6-B5AF7B652C4F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_et_200s_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB063929-AAB0-4FF8-BCA3-71BA80517B1A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_et_200s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A1EC40E7-F004-446C-B5C9-0AB9911105E0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3EE0B998-E408-408F-8F78-5E90F74E9C9B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_et_200ecopn:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0259EAE9-0CA0-49A5-A573-8339604A181B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_pn\\/pn_coupler_6es7158-3ad01-0xa0_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17C73DE7-4462-4C7B-8475-D5E6075C8E00"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_pn\\/pn_coupler_6es7158-3ad01-0xa0:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2155DBBF-98F3-42A2-8DB1-0BB27984D0E0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-300_cpu_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C87674A8-B518-4910-B03D-FFF4D5A7B627", "versionEndExcluding": "3.3.17"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-300_cpu:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "602FB384-0DB2-488C-B3CC-96E3A2882976"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-300_cpu_312_ifm_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B0C6327-7BF6-4B96-82A8-D750007869EE", "versionEndExcluding": "3.3.17"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-300_cpu_312_ifm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CCFCAA2B-71FE-4DB4-B8B0-F5FD1254C331"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-300_cpu_313_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3EF9F3FB-FBBA-42A8-9A90-FE34703274B5", "versionEndExcluding": "3.3.17"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-300_cpu_313:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4E6E900F-63C1-4E50-9DCD-26CE760E5275"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-300_cpu_314_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F2F0659-CD37-4AA9-B7D5-44639515533C", "versionEndExcluding": "3.3.17"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-300_cpu_314:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "78399465-EED5-4EBD-A2E1-6FE0BD01EDB4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-300_cpu_314_ifm_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07AD63B6-B05C-4BBF-812D-379C4D8F8CC7", "versionEndExcluding": "3.3.17"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-300_cpu_314_ifm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8BE7963C-7AFF-495B-9F0B-28FB393443FD"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-300_cpu_315_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F2A0C75-E360-4E3D-85DA-878E39054E26", "versionEndExcluding": "3.3.17"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-300_cpu_315:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E3962681-E32E-4BD1-8C71-8768248691D4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-300_cpu_315-2_dp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "488F0774-43DA-455D-905C-C514A0192260", "versionEndExcluding": "3.3.17"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-300_cpu_315-2_dp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E8FD8E6D-0527-4215-B6F0-5824011433FB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-300_cpu_316-2_dp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F103C351-99C9-4F7D-B69A-D8A876F57504", "versionEndExcluding": "3.3.17"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-300_cpu_316-2_dp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "644AD6A8-AEDE-4F1C-92F8-836877A81310"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-300_cpu_318-2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA99549B-5E95-445A-A95B-1CDA7014686B", "versionEndExcluding": "3.3.17"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-300_cpu_318-2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FF58C652-E74D-4B57-A7C5-08D7446863D5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-400_v6_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7B2893A-F0B4-4795-AF1C-DFF17D493929"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-400_v6:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A6445275-2AEF-4285-BE7A-67F20182481C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-400_pn_v7_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B6B9D8B-D7BA-4D72-97C7-7BBEB49802F7"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-400_pn_v7:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E4F8215E-E737-4CD5-B7D9-57FE4A2A2FE5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-400_dp_v7_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72F7B870-35A1-4900-8104-1303F291E29A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-400_dp_v7:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ABE9F7D2-22C7-4E7C-99C3-4A88CDD2CDB7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D03BD73-51ED-42E0-A552-C32BB7A935B2", "versionEndExcluding": "2010"}, {"criteria": "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_firmware:2010:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7151A19C-0AE5-4F66-9E3D-8BF675A8430C"}, {"criteria": "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_firmware:2010:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BEEB72F4-AE57-49DD-8876-1BCA7B805692"}, {"criteria": "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_firmware:2010:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7929F123-AC76-4F49-940F-558CABC25E75"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_winac_rtx_\\(f\\):-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C6143A7A-9D01-4D13-B0F5-2AD0DD6DA5EE"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simotion_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "080E9ADC-C88F-45D4-8453-6E5E25371476"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simotion:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "879CF09E-4735-4A73-8E7B-215F2701F7E0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sinamics_dcm_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84B1F9B1-4248-4A4C-A8BB-77475A0E9B9B", "versionEndExcluding": "1.5"}, {"criteria": "cpe:2.3:o:siemens:sinamics_dcm_firmware:1.5:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2F99FFB-C312-4080-9580-84AFB7C9FA09"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A1A43D34-ECA3-4330-B85F-02BDD1D22149"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sinamics_dcp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83803F1C-4842-43BB-B903-C2E91FF7DC08", "versionEndExcluding": "1.3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B75F50CA-7371-4BC7-8D8A-13F8BC69E4EB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sinamics_g110m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "775C90BB-C026-435C-889A-517EF85656C5", "versionEndExcluding": "4.7"}, {"criteria": "cpe:2.3:o:siemens:sinamics_g110m_firmware:4.7:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CAA92AC6-7DA0-418D-A13F-69268DFD7966"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sinamics_g110m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D61D3E9C-1346-4354-BCD9-B02F67500C41"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sinamics_g120_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1DBCA1A-27F3-4E9A-9F89-65E82A68DE4A", "versionEndExcluding": "4.7"}, {"criteria": "cpe:2.3:o:siemens:sinamics_g120_firmware:4.7:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94CB2F3E-AAA1-4472-BFD4-4E6E1B663FF5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sinamics_g120:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "61A60DCE-384B-43A4-A669-973FB8ECA932"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B3B0706-47CD-43FB-8E3A-7EEEF020AFBA", "versionEndExcluding": "4.7"}, {"criteria": "cpe:2.3:o:siemens:sinamics_g130_firmware:4.7:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D36CF8D-6DA4-49ED-9EF1-F96292F671EE"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "373DBE44-AC28-4D04-93BB-35CD8C60E899"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07F8091F-C17A-4913-A1BC-A7BA376B595F", "versionEndExcluding": "4.8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2296CA65-0E89-4BCB-8003-E7212BF1F585"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sinamics_gh150_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E231DE7-8B8D-41A3-A163-CE8EF50AF9D0", "versionEndExcluding": "4.8"}, {"criteria": "cpe:2.3:o:siemens:sinamics_gh150_firmware:4.8:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D076504-AFE3-4C51-80E5-C5992CA7D511"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sinamics_gh150:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BF977545-395A-4C34-BB22-A1047B5B6E85"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sinamics_gl150_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3653DA37-DB23-41E0-8CE8-838E384AA40A", "versionEndExcluding": "4.8"}, {"criteria": "cpe:2.3:o:siemens:sinamics_gl150_firmware:4.8:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F86A334-10F9-4DFB-A421-CBCAFD86C8C2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sinamics_gl150:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DED7F33B-D475-4232-8683-48554A6729F7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sinamics_gm150_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E25804D-D943-4C2A-9C78-AAC61F7BA4FF", "versionEndExcluding": "4.8"}, {"criteria": "cpe:2.3:o:siemens:sinamics_gm150_firmware:4.8:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06B69CD4-3AEC-4014-81DB-33805A44A5D3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sinamics_gm150:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DD76CFB0-B5D7-40DC-8D14-FC9C9BACF3CD"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sinamics_s110_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "243FFEA3-7193-45EA-B865-E9CA1D6656FE"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sinamics_s110:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6218802E-D3B1-4197-A6B5-7343A50F7D88"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77A0BE57-1A9A-4564-9C53-CF47DEEF7991", "versionEndExcluding": "4.7"}, {"criteria": "cpe:2.3:o:siemens:sinamics_s120_firmware:4.7:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "376556D0-1AE2-4F80-B3CE-C0251E35C326"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E5A824BD-935F-4E53-8313-C5544B0489C7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22AFC8AE-8AF0-4418-B251-4CE293B9DCD8", "versionEndExcluding": "4.8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0D48682C-A39D-4A09-B904-50FA64A9D2A5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sinamics_sl150_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30E52510-9306-42B8-A517-A6BBD34B8B9D", "versionEndExcluding": "4.7"}, {"criteria": "cpe:2.3:o:siemens:sinamics_sl150_firmware:4.7:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58A71910-E54F-426B-BAB1-260AEFD8EF6E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sinamics_sl150:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C6619B0F-7CDC-40A6-89B2-C6067AF45214"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sinamics_sm120_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFFE3048-EEB0-48A0-BED0-8647284B022B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sinamics_sm120:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "444DD77F-DB65-4766-A89D-7A679B4CA1E1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:siemens:sinumerik_828d:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "328F0192-B34D-481C-8964-226317439966", "versionEndExcluding": "4.8"}, {"criteria": "cpe:2.3:a:siemens:sinumerik_828d:4.8:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7936CF6-DC07-4550-9FEC-823A2F49096D"}, {"criteria": "cpe:2.3:a:siemens:sinumerik_828d:4.8:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BEE7D914-F2DE-4D8C-BFB2-7AD16650CD3F"}, {"criteria": "cpe:2.3:a:siemens:sinumerik_828d:4.8:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDBAEDBC-6A76-495D-9BC7-BA687F32EE40"}, {"criteria": "cpe:2.3:a:siemens:sinumerik_828d:4.8:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45EF769B-1EB1-4D2D-84C5-8005EF1EE1EF"}, {"criteria": "cpe:2.3:a:siemens:sinumerik_828d:4.8:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48EE5859-5450-4078-94E7-E525B999A837"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:siemens:sinumerik_840d_sl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9FFC86D6-F312-4097-91A6-79C78502323F"}], "operator": "OR"}]}], "sourceIdentifier": "productcert@siemens.com"}