Risks
- Confidentiality of data breach
- Circumvention of security policy
- Remote denial of service
- Remote arbitrary code execution
- Remote code injection (XSS)
- Remote cross-site request forgery (CSRF)
Affected systems
- CloudConnect 712 versions prior to V1.1.5
- SCALANCE SC-600 versions prior to V2.0.1
- Refer to the vendor bulletins for the complete list of vulnerable products, including the security bulletin SSA-187667 concerning the latest vulnerabilities affecting Microsoft Remote Desktop Services (see section Documentation CERTFR-2019-ALE-012).
- SIMATIC TDC CP51M1 versions prior to V1.1.7
- SINEMA Remote Connect Server versions prior to V2.0 SP1
- SINETPLAN versions V2.0 without TIA Administrator V1.0 SP1 Upd1
Summary
Multiple vulnerabilities have been discovered in Siemens products. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service, and circumvention of security policy.
Solution
Refer to the vendor security bulletin for patches (see Documentation section).
Documentation
- Siemens security bulletin ssa-187667 of September 10, 2019 https://cert-portal.siemens.com/productcert/pdf/ssa-187667.pdf
- Siemens security bulletin ssa-189842 of September 10, 2019 https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
- Siemens security bulletin ssa-191683 of September 10, 2019 https://cert-portal.siemens.com/productcert/pdf/ssa-191683.pdf
- Siemens security bulletin ssa-250618 of September 10, 2019 https://cert-portal.siemens.com/productcert/pdf/ssa-250618.pdf
- Siemens security bulletin ssa-462066 of September 10, 2019 https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf
- Siemens security bulletin ssa-834884 of September 10, 2019 https://cert-portal.siemens.com/productcert/pdf/ssa-834884.pdf
- Siemens security bulletin ssa-884497 of September 10, 2019 https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf
- CERT-FR Alert CERTFR-2019-ALE-012 of August 14, 2019 /alert/CERTFR-2019-ALE-012/
- CVE Reference CVE-2019-10915 https://www.cve.org/CVERecord?id=CVE-2019-10915
- CVE Reference CVE-2019-10937 https://www.cve.org/CVERecord?id=CVE-2019-10937
- CVE Reference CVE-2019-11477 https://www.cve.org/CVERecord?id=CVE-2019-11477
- CVE Reference CVE-2019-11478 https://www.cve.org/CVERecord?id=CVE-2019-11478
- CVE Reference CVE-2019-11479 https://www.cve.org/CVERecord?id=CVE-2019-11479
- CVE Reference CVE-2019-1181 https://www.cve.org/CVERecord?id=CVE-2019-1181
- CVE Reference CVE-2019-1182 https://www.cve.org/CVERecord?id=CVE-2019-1182
- CVE Reference CVE-2019-1222 https://www.cve.org/CVERecord?id=CVE-2019-1222
- CVE Reference CVE-2019-12255 https://www.cve.org/CVERecord?id=CVE-2019-12255
- CVE Reference CVE-2019-12256 https://www.cve.org/CVERecord?id=CVE-2019-12256
- CVE Reference CVE-2019-12257 https://www.cve.org/CVERecord?id=CVE-2019-12257
- CVE Reference CVE-2019-12258 https://www.cve.org/CVERecord?id=CVE-2019-12258
- CVE Reference CVE-2019-12259 https://www.cve.org/CVERecord?id=CVE-2019-12259
- CVE Reference CVE-2019-1226 https://www.cve.org/CVERecord?id=CVE-2019-1226
- CVE Reference CVE-2019-12260 https://www.cve.org/CVERecord?id=CVE-2019-12260
- CVE Reference CVE-2019-12261 https://www.cve.org/CVERecord?id=CVE-2019-12261
- CVE Reference CVE-2019-12262 https://www.cve.org/CVERecord?id=CVE-2019-12262
- CVE Reference CVE-2019-12263 https://www.cve.org/CVERecord?id=CVE-2019-12263
- CVE Reference CVE-2019-12264 https://www.cve.org/CVERecord?id=CVE-2019-12264
- CVE Reference CVE-2019-12265 https://www.cve.org/CVERecord?id=CVE-2019-12265
- CVE Reference CVE-2019-13918 https://www.cve.org/CVERecord?id=CVE-2019-13918
- CVE Reference CVE-2019-13919 https://www.cve.org/CVERecord?id=CVE-2019-13919
- CVE Reference CVE-2019-13920 https://www.cve.org/CVERecord?id=CVE-2019-13920
- CVE Reference CVE-2019-13922 https://www.cve.org/CVERecord?id=CVE-2019-13922
- CVE Reference CVE-2019-13923 https://www.cve.org/CVERecord?id=CVE-2019-13923