CVE-2019-19300

{"id": "CVE-2019-19300", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "productcert@siemens.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2020-04-14T20:15:14.903", "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-593272.html", "source": "productcert@siemens.com"}, {"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-593272.pdf", "tags": ["Vendor Advisory"], "source": "productcert@siemens.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "productcert@siemens.com", "description": [{"lang": "en", "value": "CWE-400"}]}, {"type": "Secondary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR ATD430W, SIDOOR ATE530S COATED, SIDOOR ATE531S, SIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0), SIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0), SIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0), SIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0), SIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), SIMATIC ET200AL IM157-1 PN, SIMATIC ET200ecoPN, AI 8xRTD/TC, M12-L (6ES7144-6JF00-0BB0), SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0), SIMATIC ET200ecoPN, DI 16x24VDC, M12-L (6ES7141-6BH00-0BB0), SIMATIC ET200ecoPN, DI 8x24VDC, M12-L (6ES7141-6BG00-0BB0), SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L (6ES7143-6BH00-0BB0), SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L (6ES7142-6BG00-0BB0), SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L (6ES7142-6BR00-0BB0), SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 MF HF, SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants), SIMATIC MICRO-DRIVE PDC, SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0), SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller, SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0), SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0), SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0), SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0), SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0), SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0), SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0), SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0), SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0), SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0), SIMATIC S7-400 H V6 CPU family and below (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants), SIMATIC TDC CP51M1, SIMATIC TDC CPU555, SIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0), SIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0), SINAMICS S/G Control Unit w. PROFINET, SIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0), SIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0), SIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0), SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0), SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0), SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0), SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0), SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0). The Interniche-based TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en los Kits de Desarrollo/Evaluaci\u00f3n para PROFINET IO: EK-ERTEC 200 (Todas las versiones), Kits de desarrollo/evaluaci\u00f3n para PROFINET IO: EK-ERTEC 200P (Todas las versiones), KTK ATE530S (Todas las versiones), SIDOOR ATD430W (Todas las versiones), SIDOOR ATE530S COATED (Todas las versiones), SIDOOR ATE531S (Todas las versiones), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. variantes SIPLUS) (Todas las versiones anteriores a V2. 0), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. variantes SIPLUS) (Todas las versiones anteriores a V2.0), SIMATIC ET200AL IM157-1 PN (Todas las versiones), SIMATIC ET200MP IM155-5 PN HF (incl. variantes SIPLUS) (Todas las versiones posteriores o iguales a V4. 2), SIMATIC ET200SP IM155-6 MF HF (Todas las versiones), SIMATIC ET200SP IM155-6 PN HA (incl. variantes SIPLUS) (Todas las versiones), SIMATIC ET200SP IM155-6 PN HF (incl. variantes SIPLUS) (Todas las versiones posteriores o iguales a V4.2), SIMATIC ET200SP IM155-6 PN/2 HF (incl. variantes SIPLUS) (Todas las versiones posteriores o iguales a V4. 2), SIMATIC ET200SP IM155-6 PN/3 HF (incl. variantes SIPLUS) (Todas las versiones posteriores o iguales a V4.2), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (Todas las versiones posteriores o iguales a V5.1.1), SIMATIC ET200ecoPN, DI 16x24VDC, M12-L (Todas las versiones posteriores o iguales a V5.1.1), SIMATIC ET200ecoPN, DI 8x24VDC, M12-L (Todas las versiones posteriores o iguales a V5.1. 1), SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L (Todas las versiones posteriores o iguales a V5.1.1), SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L (Todas las versiones posteriores o iguales a V5.1. 1), SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L (Todas las versiones posteriores o iguales a V5.1.1), SIMATIC MICRO-DRIVE PDC (Todas las versiones), Acoplador SIMATIC PN/MF (Todas las versiones), Acoplador SIMATIC PN/PN (incl. SIPLUS NET) (Todas las versiones posteriores o iguales a V4.2), familia de CPUs SIMATIC S7-1200 (incl. variantes SIPLUS) (Todas las versiones anteriores a V4.4.0), familia de CPUs SIMATIC S7-1500 (incl. CPUs ET200 relacionadas y variantes SIPLUS) (Todas las versiones anteriores a V2. 0), SIMATIC S7-1500 Software Controller (Todas las versiones anteriores a V2.0), familia de CPUs SIMATIC S7-300 (incl. CPUs ET200 relacionadas y variantes SIPLUS) (Todas las versiones), familia de CPUs SIMATIC S7-400 H V6 e inferiores (incl. variantes SIPLUS) (Todas las versiones), familia de CPUs SIMATIC S7-400 PN/DP V7 e inferiores (incl. variantes SIPLUS) (Todas las versiones) SIPLUS) (Todas las versiones), familia de CPUs SIMATIC S7-410 (incl. variantes SIPLUS) (Todas las versiones), SIMATIC TDC CP51M1 (Todas las versiones), SIMATIC TDC CPU555 (Todas las versiones), SIMATIC WinAC RTX (F) 2010 (Todas las versiones), SINAMICS S/G Control Unit w. PROFINET (Todas las versiones). La pila TCP basada en Interniche puede verse obligada a realizar llamadas muy costosas por cada paquete entrante, lo que puede provocar una denegaci\u00f3n de servicio"}], "lastModified": "2024-05-14T16:15:16.220", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:ktk_ate530s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C36E66FB-3277-43DB-8FD5-A5C0BF8B85AB"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:ktk_ate530s_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF853904-505A-43AE-85BF-6F2F0984F357"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sidoor_atd430w:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "414B74B0-391F-4A60-A31B-93F093D8B052"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sidoor_atd430w_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8942783A-1668-4AD7-BED2-F431A2F17768"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sidoor_ate530s_coated:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5C0B0026-FCCD-4821-8E0A-3A588CF6A2F6"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sidoor_ate530s_coated_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8127E361-2D23-4BD5-A4D0-2A117E26647F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sidoor_ate531s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7BD93279-A88D-481B-A03C-24BDC823B4A4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sidoor_ate531s_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF541D44-34FB-4639-BF04-88E57ACC2770"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14427676-C6DA-406C-B3B8-B5E8F7A5E556", "versionEndExcluding": "2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E8AED132-C4CF-4C2E-B826-DFAE745256FD"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A5F82BE-27AD-44E7-A100-2030D74562B9", "versionEndExcluding": "2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "30E3491F-8F4A-4C7D-960D-073AA41DB4D6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_et200mp_im155-5_pn_hf_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27E4A4A2-D155-4FF3-947E-74EAE6F3BAB2", "versionEndIncluding": "4.2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_et200mp_im155-5_pn_hf:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0B26FB23-4646-4786-82B1-C24CBF9AE517"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_et200sp_im155-6_mf_hf:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "753182D2-130F-406D-9394-315D245F4CA5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_et200sp_im155-6_mf_hf_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C36F819-FE35-44B7-9BEF-AF989D20907B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_et200sp_im155-6_pn_ha_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96D5C35C-53DF-4C38-8403-C07D306BCB5A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_et200sp_im155-6_pn_ha:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C47C0CE6-01BE-4E42-B139-6B1BD3647497"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_et200sp_im155-6_pn_hf:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AE9CBE59-18F4-40E9-A8DF-4873F8796FDA"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_et200sp_im155-6_pn_hf_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "058C19BA-583B-4CF8-86C9-71BE2BAC0829", "versionEndIncluding": "4.2"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_et200sp_im155-6_pn\\/2_hf:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "47BBCD40-C121-4CB1-BD18-547D94B541D1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_et200sp_im155-6_pn\\/2_hf_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED9B4F54-F484-4A68-BFA7-31A7AC1CFD18", "versionEndIncluding": "4.2"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_et200sp_im155-6_pn\\/2_hf_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED9B4F54-F484-4A68-BFA7-31A7AC1CFD18", "versionEndIncluding": "4.2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_et200sp_im155-6_pn\\/2_hf:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "47BBCD40-C121-4CB1-BD18-547D94B541D1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_micro-drive_pdc:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "81BAF35F-73B4-4AE4-AC7B-C138E06A75BC"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_micro-drive_pdc_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70711186-E5B1-4DE6-AC41-2F9574EF1DD1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_pn\\/pn_coupler:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "49FB85F8-7D45-433E-805B-360725F2980C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_pn\\/pn_coupler_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB2132B6-3D9E-4C2A-A447-FD7A33ACED0B", "versionEndIncluding": "4.2"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511-1_pn_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F6EB90F-7BEC-472C-95AA-A63733392A20", "versionEndExcluding": "2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511-1_pn:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F62F4050-F6C9-4C8F-8E09-F0AEEDB6B1FC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513-1_pn_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2302F98-36C3-4487-807D-13CB630ABFD3", "versionEndExcluding": "2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513-1_pn:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D6663D66-5127-4F5D-B39D-50D3F88F4435"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515-2_pn_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5449F35C-95B2-447A-A33A-DE42DCE7F309", "versionEndExcluding": "2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515-2_pn:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ABE9C79B-52A3-45F4-9DA5-6D61A6BF7753"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516-3_pn\\/dp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E76D0BA0-4750-459C-90E5-3AA2E49FC692", "versionEndExcluding": "2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516-3_pn\\/dp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A5C12961-CCF4-4248-9E43-8866671A257A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517-3_pn\\/dp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6FAE1A8-187C-4230-9420-C661807F726C", "versionEndExcluding": "2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517-3_pn\\/dp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "984F6E53-482D-4282-BBAA-87B0375310FA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\\/dp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9AC1C1F6-41B1-43F0-8EF9-6EB85767047B", "versionEndExcluding": "2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn\\/dp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "40F38253-92F5-4A3A-AA07-292F7542D8A6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511f-1_pn_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B6ADFBD-0116-4EFD-A32A-7C5D51559C0A", "versionEndExcluding": "2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511f-1_pn:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3A3E8A67-2A29-4DE9-AF1B-D74A42D55D1E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513f-1_pn_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "68454AF8-6CC1-4826-A1B2-83F229E04D51", "versionEndExcluding": "2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513f-1_pn:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "69DE61DE-5B71-4F35-AC4F-C6EC24A7DDAA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515f-2_pn_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "021CEB2B-A7FD-4254-8169-2B4AA96C2F8B", "versionEndExcluding": "2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515f-2_pn:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EDE82551-008D-4B75-BDB5-3DD30ADD1863"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516f-3_pn\\/dp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF177FCE-0D08-4541-9D92-BA11DD83EB8C", "versionEndExcluding": "2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516f-3_pn\\/dp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5787D689-D80C-47BC-A0C2-E45E0FAD49D9"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517f-3_pn\\/dp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDC78C64-9D9C-44BF-A35E-86E41DB99075", "versionEndExcluding": "2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517f-3_pn\\/dp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DB2327DF-ADA4-453E-A35E-E986D822F1E7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn\\/dp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0E7BE77-FD64-42BA-AF2B-ED722581C207", "versionEndExcluding": "2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518f-4_pn\\/dp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DB469732-E3C2-45BC-8F65-C1B6A676A974"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:siemens:simatic_s7-1500:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53E68667-655F-45A9-9BCC-9122F933DE4B", "versionEndExcluding": "2.0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-300_cpu_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4872DF2-8C81-45BA-A606-99D0A75464AC"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-300_cpu:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "602FB384-0DB2-488C-B3CC-96E3A2882976"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-400_pn\\/dp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC917346-94F6-44FD-AC00-AED0CF3CBBD1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-400_pn\\/dp:v7:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "978BF010-6897-4906-8555-11BC9D460793"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_s7-410_cpu_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DCCB7F5-E462-4CD2-B9CB-922C90FDADB3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_s7-410_cpu:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2B5A3831-9F2A-4D39-9A08-B5657FD6A084"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_tdc_cp51m1_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E2689E6-A204-4744-827E-EEFB11B7C334"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_tdc_cp51m1:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8DA1E7C4-6352-41A4-8A94-C24DDB456572"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_tdc_cpu555_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D9C7D4A-F989-4B01-8FFD-5B5859F42D43"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_tdc_cpu555:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AE6AB995-D67B-43E5-B8FF-97C38D20CB10"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_winac_rtx_\\(f\\)_2010_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB171ABA-0EE4-43BB-B7C7-D474A9E13112"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_winac_rtx_\\(f\\)_2010:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E6034789-ABD1-4035-8378-F0BA7157B087"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:sinamics_s\\/g_control_unit_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "351FA4BB-4055-4631-BA85-BFC27D245BC3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:sinamics_s\\/g_control_unit:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BAACC0AA-73DA-406D-9F0B-D289BF687358"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "productcert@siemens.com"}