Multiple Siemens Products CVE-2019-6568 Unspecified Denial of Service Vulnerability

Bugtraq ID:	107842
Class:	Input Validation Error
CVE:	CVE-2019-6568
Remote:	Yes
Local:	No
Published:	Apr 09 2019 12:00AM
Updated:	Apr 09 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Siemens TIM 1531 IRC 0 Siemens SITOP UPS1600 0 Siemens SITOP PSU8600 0 Siemens SITOP Manager 0 Siemens SINAMICS S210 5.1 SP1 Siemens SINAMICS S210 5.1 Siemens Sinamics S150 5.1 SP1 Siemens Sinamics S150 5.1 Siemens Sinamics S150 4.8 Siemens Sinamics S150 4.7 SP1 Siemens Sinamics S150 4.7 Siemens Sinamics S150 4.6 Siemens Sinamics S120 5.1 SP1 Siemens Sinamics S120 5.1 Siemens Sinamics S120 4.8 Siemens Sinamics S120 4.7 SP1 Siemens Sinamics S120 4.7 Siemens Sinamics S120 4.6 Siemens Sinamics G150 5.1 SP1 Siemens Sinamics G150 5.1 Siemens Sinamics G150 4.8 Siemens Sinamics G150 4.7 SP1 Siemens Sinamics G150 4.7 Siemens Sinamics G150 4.6 Siemens Sinamics G130 5.1 SP1 Siemens Sinamics G130 5.1 Siemens Sinamics G130 4.8 Siemens Sinamics G130 4.7 SP1 Siemens Sinamics G130 4.7 Siemens Sinamics G130 4.6 Siemens SIMOCODE pro V PN 0 Siemens SIMOCODE pro V EIP 0 Siemens SIMATIC Wincc Runtime Advanced 0 Siemens SIMATIC WinAC RTX 2010 0 Siemens SIMATIC Teleservice Adapter IE Standard 0 Siemens SIMATIC Teleservice Adapter IE Basic 0 Siemens SIMATIC Teleservice Adapter IE Advanced 0 Siemens SIMATIC S7-PLCSIM Advanced 0 Siemens SIMATIC S7-400 PN/DP 7 Siemens SIMATIC S7-400 PN V6 0 Siemens SIMATIC S7-300 CPU 0 Siemens SIMATIC S7-1500 Software Controller 0 Siemens SIMATIC S7-1500 CPU 0 Siemens SIMATIC RF600R 0 Siemens SIMATIC RF188C 0 Siemens SIMATIC RF186C 0 Siemens SIMATIC RF185C 0 Siemens SIMATIC RF182C 0 Siemens SIMATIC IPC DiagMonitor 0 Siemens SIMATIC HMI KTP900F Mobile 0 Siemens SIMATIC HMI KTP900 Mobile 0 Siemens SIMATIC HMI KTP700F Mobile 0 Siemens SIMATIC HMI KTP700 Mobile 0 Siemens SIMATIC HMI KTP400F Mobile 0 Siemens SIMATIC HMI KTP Mobile Panels 0 Siemens SIMATIC HMI Comfort Panels 0 Siemens SIMATIC HMI Comfort Outdoor Panels 0 Siemens SIMATIC ET200 Open Controller CPU 1515SP PC2 0 Siemens SIMATIC ET200 Open Controller CPU 1515SP PC 0 Siemens SIMATIC CP 443-1 OPC UA 0 Siemens SIMATIC CP 443-1 Advanced 0 Siemens SIMATIC CP 443-1 0 Siemens SIMATIC CP 343-1 Advanced 0 Siemens RFID 181-EIP 0 Siemens CP 1616 0 Siemens CP 1604 0
Not Vulnerable:	Siemens Sinamics S150 5.1 SP1 HF4 Siemens Sinamics S150 4.8 HF6 Siemens Sinamics S120 5.1 SP1 HF4 Siemens Sinamics S120 4.8 HF6 Siemens Sinamics G150 5.1 SP1 HF4 Siemens Sinamics G150 4.8 HF6 Siemens Sinamics G130 5.1 SP1 HF4 Siemens Sinamics G130 4.8 HF6 Siemens SIMATIC S7-300 CPU V3.X.16 Siemens SIMATIC ET200 Open Controller CPU 1515SP PC 2.1.6

Multiple Siemens Products CVE-2019-6568 Unspecified Denial of Service Vulnerability

Multiple Siemens products are prone to an unspecified denial-of-service vulnerability.

Attackers can exploit this issue to cause a denial-of-service condition, denying service to legitimate users.

Multiple Siemens Products CVE-2019-6568 Unspecified Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Siemens Products CVE-2019-6568 Unspecified Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Siemens Products CVE-2019-6568 Unspecified Denial of Service Vulnerability

References:

• Siemens Homepage (Siemens)
  
• ICSA-19-099-06 Siemens CP, SIAMTIC, SIMOCODE, SINAMICS, SITOP, and TIM (ICS-CERT)
  
• SSA-480230: Denial-of-Service in Webserver of Industrial Products (Siemens)