Siemens ProductCERT Patch Day — October 2019
Tuesday, 8 October 2019
- Vulnerabilities
- 4
- Critical
- 0
- High
- 2
- Zero-days
- 0
- Public exploit
- 0
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
All vulnerabilities 4
High2 ShowHide
-
High 7.5
CVE-2019-10923 An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected …EPSS 1.4%
-
High 7.5
CVE-2019-10936 Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of s…EPSS 2.1%
Unscored2 ShowHide
-
Unscored
CVE-2019-13921 A vulnerability has been identified in SIMATIC WinAC RTX (F) 2010 (All versions < SP3 Update 1). Affected versions of the software contain a vulnerability that…EPSS 1.4%
-
Unscored
CVE-2019-13929 A vulnerability has been identified in SIMATIC IT UADM (All versions < V1.3). An authenticated remote attacker with network access to port 1434/tcp of SIMATIC …EPSS 1.3%