Siemens ProductCERT Patch Day — July 2019
Tuesday, 9 July 2019
- Vulnerabilities
- 5
- Critical
- 0
- High
- 0
- Zero-days
- 0
- Public exploit
- 1
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Public exploit code 1
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- Unscored
All vulnerabilities 5
Unscored5 ShowHide
- Unscored
-
Unscored
CVE-2019-10930 A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (A…EPSS 1.8%
-
Unscored
CVE-2019-10931 A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (A…EPSS 1.5%
- Unscored
-
Unscored
CVE-2019-10935 A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC …EPSS 1.3%