CVE-2019-6568: CVE-2019-6568

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2019-6568

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device.

Source: NVD (National Vulnerability Database)

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Source: NVD (National Vulnerability Database)

Vulnerability Type

跨界内存读

Source: NVD (National Vulnerability Database)

Vulnerability Title

Siemens SIMATIC S7-1500 CPU 缓冲区错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Siemens SIMATIC S7-1500 CPU是德国西门子（Siemens）公司的一款CPU（中央处理器）模块。 Siemens SIMATIC S7-1500 CPU 存在缓冲区错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。以下产品及版本受到影响：Siemens SIMATIC S7-1500 CPU family（相关的ET200 CPUs和SIPLUS variants）；

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
Siemens	SIMATIC CP 1604	All versions	-
Siemens	SIMATIC CP 1616	All versions	-
Siemens	SIMATIC CP 343-1 Advanced	All versions	-
Siemens	SIMATIC CP 443-1	All versions < V3.3	-
Siemens	SIMATIC CP 443-1	All versions < V3.3	-
Siemens	SIMATIC CP 443-1 Advanced	All versions < V3.3	-
Siemens	SIMATIC CP 443-1 OPC UA	All versions	-
Siemens	SIMATIC ET 200pro IM154-8 PN/DP CPU	All versions < V3.2.16	-
Siemens	SIMATIC ET 200pro IM154-8F PN/DP CPU	All versions < V3.2.16	-
Siemens	SIMATIC ET 200pro IM154-8FX PN/DP CPU	All versions < V3.2.16	-
Siemens	SIMATIC ET 200S IM151-8 PN/DP CPU	All versions < V3.2.16	-
Siemens	SIMATIC ET 200S IM151-8F PN/DP CPU	All versions < V3.2.16	-
Siemens	SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)	All versions < V2.1.6	-
Siemens	SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)	All versions < V2.7	-
Siemens	SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)	All versions < V15.1 Upd4	-
Siemens	SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)	All versions < V15.1 Upd4	-
Siemens	SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F	All versions < V15.1 Upd4	-
Siemens	SIMATIC IPC DiagMonitor	All versions < V5.1.3	-
Siemens	SIMATIC RF182C	All versions	-
Siemens	SIMATIC RF185C	All versions < V1.1.0	-
Siemens	SIMATIC RF186C	All versions < V1.1.0	-
Siemens	SIMATIC RF188C	All versions < V1.1.0	-
Siemens	SIMATIC RF600R family	All versions < V3.2.1	-
Siemens	SIMATIC RFID 181EIP	All versions	-
Siemens	SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)	All versions < V2.6.1	-
Siemens	SIMATIC S7-1500 Software Controller	All versions < V2.7	-
Siemens	SIMATIC S7-300 CPU 314C-2 PN/DP	All versions < V3.3.16	-
Siemens	SIMATIC S7-300 CPU 315-2 PN/DP	All versions < V3.2.16	-
Siemens	SIMATIC S7-300 CPU 315F-2 PN/DP	All versions < V3.2.16	-
Siemens	SIMATIC S7-300 CPU 315T-3 PN/DP	All versions < V3.2.16	-
Siemens	SIMATIC S7-300 CPU 317-2 PN/DP	All versions < V3.2.16	-
Siemens	SIMATIC S7-300 CPU 317F-2 PN/DP	All versions < V3.2.16	-
Siemens	SIMATIC S7-300 CPU 317T-3 PN/DP	All versions < V3.2.16	-
Siemens	SIMATIC S7-300 CPU 317TF-3 PN/DP	All versions < V3.2.16	-
Siemens	SIMATIC S7-300 CPU 319-3 PN/DP	All versions < V3.2.16	-
Siemens	SIMATIC S7-300 CPU 319F-3 PN/DP	All versions < V3.2.16	-
Siemens	SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)	All versions	-
Siemens	SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)	All versions	-
Siemens	SIMATIC S7-PLCSIM Advanced	All versions < V2.0 SP1 UPD1	-
Siemens	SIMATIC Teleservice Adapter IE Advanced	All versions	-
Siemens	SIMATIC Teleservice Adapter IE Basic	All versions	-
Siemens	SIMATIC Teleservice Adapter IE Standard	All versions	-
Siemens	SIMATIC WinAC RTX 2010	All versions < V2010 SP3	-
Siemens	SIMATIC WinAC RTX F 2010	All versions < V2010 SP3	-
Siemens	SIMATIC WinCC Runtime Advanced	All versions < V15.1 Upd4	-
Siemens	SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants)	All versions < V1.1.3	-
Siemens	SIMOCODE pro V PROFINET (incl. SIPLUS variants)	All versions < V2.1.3	-
Siemens	SINAMICS G130 V4.6 Control Unit	All versions	-
Siemens	SINAMICS G130 V4.7 Control Unit	All versions	-
Siemens	SINAMICS G130 V4.7 SP1 Control Unit	All versions	-
Siemens	SINAMICS G130 V4.8 Control Unit	All versions < V4.8 HF6	-
Siemens	SINAMICS G130 V5.1 Control Unit	All versions	-
Siemens	SINAMICS G130 V5.1 SP1 Control Unit	All versions < V5.1 SP1 HF4	-
Siemens	SINAMICS G150 V4.6 Control Unit	All versions	-
Siemens	SINAMICS G150 V4.7 Control Unit	All versions	-
Siemens	SINAMICS G150 V4.7 SP1 Control Unit	All versions	-
Siemens	SINAMICS G150 V4.8 Control Unit	All versions < V4.8 HF6	-
Siemens	SINAMICS G150 V5.1 Control Unit	All versions	-
Siemens	SINAMICS G150 V5.1 SP1 Control Unit	All versions < V5.1 SP1 HF4	-
Siemens	SINAMICS GH150 V4.7 (Control Unit)	All versions	-
Siemens	SINAMICS GH150 V4.8 (Control Unit)	All versions < V4.8 SP2 HF9	-
Siemens	SINAMICS GL150 V4.7 (Control Unit)	All versions	-
Siemens	SINAMICS GL150 V4.8 (Control Unit)	All versions < V4.8 SP2 HF9	-
Siemens	SINAMICS GM150 V4.7 (Control Unit)	All versions	-
Siemens	SINAMICS GM150 V4.8 (Control Unit)	All versions < V4.8 SP2 HF9	-
Siemens	SINAMICS S120 V4.6 Control Unit (incl. SIPLUS variants)	All versions	-
Siemens	SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants)	All versions	-
Siemens	SINAMICS S120 V4.7 SP1 Control Unit (incl. SIPLUS variants)	All versions	-
Siemens	SINAMICS S120 V4.8 Control Unit (incl. SIPLUS variants)	All versions < V4.8 HF6	-
Siemens	SINAMICS S120 V5.1 Control Unit (incl. SIPLUS variants)	All versions	-
Siemens	SINAMICS S120 V5.1 SP1 Control Unit (incl. SIPLUS variants)	All versions < V5.1 SP1 HF4	-
Siemens	SINAMICS S150 V4.6 Control Unit	All versions	-
Siemens	SINAMICS S150 V4.7 Control Unit	All versions	-
Siemens	SINAMICS S150 V4.7 SP1 Control Unit	All versions	-
Siemens	SINAMICS S150 V4.8 Control Unit	All versions < V4.8 HF6	-
Siemens	SINAMICS S150 V5.1 Control Unit	All versions	-
Siemens	SINAMICS S150 V5.1 SP1 Control Unit	All versions < V5.1 SP1 HF4	-
Siemens	SINAMICS S210	All versions < V5.1 SP1 HF8	-
Siemens	SINAMICS SL150 V4.7 (Control Unit)	All versions < V4.7 HF33	-
Siemens	SINAMICS SL150 V4.8 (Control Unit)	All versions	-
Siemens	SINAMICS SM120 V4.7 (Control Unit)	All versions	-
Siemens	SINAMICS SM120 V4.8 (Control Unit)	All versions < V4.8 SP2 HF10	-
Siemens	SINAMICS SM150 V4.8 (Control Unit)	All versions	-
Siemens	SIPLUS ET 200S IM151-8 PN/DP CPU	All versions < V3.2.16	-
Siemens	SIPLUS ET 200S IM151-8F PN/DP CPU	All versions < V3.2.16	-
Siemens	SIPLUS NET CP 343-1 Advanced	All versions	-
Siemens	SIPLUS NET CP 443-1	All versions < V3.3	-
Siemens	SIPLUS NET CP 443-1 Advanced	All versions < V3.3	-
Siemens	SIPLUS S7-300 CPU 314C-2 PN/DP	All versions < V3.3.16	-
Siemens	SIPLUS S7-300 CPU 315-2 PN/DP	All versions < V3.2.16	-
Siemens	SIPLUS S7-300 CPU 315F-2 PN/DP	All versions < V3.2.16	-
Siemens	SIPLUS S7-300 CPU 317-2 PN/DP	All versions < V3.2.16	-
Siemens	SIPLUS S7-300 CPU 317F-2 PN/DP	All versions < V3.2.16	-
Siemens	SITOP Manager	All versions < V1.1	-
Siemens	SITOP PSU8600	All versions < V1.5	-
Siemens	SITOP UPS1600 (incl. SIPLUS variants)	All versions < V2.3	-
Siemens	TIM 1531 IRC (incl. SIPLUS NET variants)	All versions < V2.1	-

II. Public POCs for CVE-2019-6568

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2019-6568

Please Login to view more intelligence information

New Vulnerabilities

Product: SIMATIC CP 1604

Vendor: Siemens

Same weakness: CWE-125

V. Comments for CVE-2019-6568

No comments yet

Support Us — Your donation helps us keep running

I. Basic Information for CVE-2019-6568

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2019-6568

III. Intelligence Information for CVE-2019-6568

New Vulnerabilities

V. Comments for CVE-2019-6568

Leave a comment