Improper handling of exceptional conditions in Siemens SIMATIC CP 443-1 OPC UA
Priority MEDIUM 42CWE-248Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-248.
Summary
A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.7), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants) (All versions < V15.1 Upd 4), SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants) (All versions < V15.1 Upd 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Upd 4), SIMATIC IPC DiagMonitor (All versions < V5.1.3), SIMATIC NET PC Software V13 (All versions), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC RF188C (All versions < V1.1.0), SIMATIC RF600R family (All versions < V3.2.1), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 < V2.6.1), SIMATIC S7-1500 Software Controller (All versions between V2.5 (including) and V2.7 (excluding)), SIMATIC WinCC OA (All versions < V3.15 P018), SIMATIC WinCC Runtime Advanced (All versions < V15.1 Upd 4), SINEC NMS (All versions < V1.0 SP1), SINEMA Server (All versions < V14 SP2), SINUMERIK OPC UA Server (All versions < V2.1), TeleControl Server Basic (All versions < V3.1.1). Specially crafted network packets sent to affected devices on port 4840/tcp could allow an unauthenticated remote attacker to cause a denial of service condition of the OPC communication or crash the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the OPC communication.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01678 77th percentileScored 2026-11-07
Fix Fixed SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (Siemens): V2.7SIMATIC IPC DiagMonitor (Siemens): V5.1.3+4 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SIMATIC CP 443-1 OPC UA | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) | before V2.7 | V2.7 | Patch available | CNA |
| Siemens | SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants) | All versions < V15.1 Upd 4 | — | No fix listed | CNA |
| Siemens | SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants) | All versions < V15.1 Upd 4 | — | No fix listed | CNA |
| Siemens | SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F | All versions < V15.1 Upd 4 | — | No fix listed | CNA |
| Siemens | SIMATIC IPC DiagMonitor | before V5.1.3 | V5.1.3 | Patch available | CNA |
| Siemens | SIMATIC NET PC Software V13 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC NET PC Software V14 | All versions < V14 SP1 Update 14 | — | No fix listed | CNA |
| Siemens | SIMATIC NET PC Software V15 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC RF188C | before V1.1.0 | V1.1.0 | Patch available | CNA |
| Siemens | SIMATIC RF600R family | before V3.2.1 | V3.2.1 | Patch available | CNA |
| Siemens | SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) | All versions >= V2.5 < V2.6.1 | — | No fix listed | CNA |
| Siemens | SIMATIC S7-1500 Software Controller | All versions between V2.5 (including) and V2.7 (excluding) | — | No fix listed | CNA |
| Siemens | SIMATIC WinCC OA | All versions < V3.15 P018 | — | No fix listed | CNA |
| Siemens | SIMATIC WinCC Runtime Advanced | All versions < V15.1 Upd 4 | — | No fix listed | CNA |
| Siemens | SINEC NMS | All versions < V1.0 SP1 | — | No fix listed | CNA |
| Siemens | SINEMA Server | All versions < V14 SP2 | — | No fix listed | CNA |
| Siemens | SINUMERIK OPC UA Server | before V2.1 | V2.1 | Patch available | CNA |
| Siemens | TeleControl Server Basic | before V3.1.1 | V3.1.1 | Patch available | CNA |
- SIMATIC CP 443-1 OPC UA VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) VendorSiemens Affected before V2.7 Fixed in V2.7 Patch available CNA
- SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants) VendorSiemens Affected All versions < V15.1 Upd 4 Fixed in — No fix listed CNA
- SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants) VendorSiemens Affected All versions < V15.1 Upd 4 Fixed in — No fix listed CNA
- SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F VendorSiemens Affected All versions < V15.1 Upd 4 Fixed in — No fix listed CNA
- SIMATIC IPC DiagMonitor VendorSiemens Affected before V5.1.3 Fixed in V5.1.3 Patch available CNA
- SIMATIC NET PC Software V13 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC NET PC Software V14 VendorSiemens Affected All versions < V14 SP1 Update 14 Fixed in — No fix listed CNA
- SIMATIC NET PC Software V15 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC RF188C VendorSiemens Affected before V1.1.0 Fixed in V1.1.0 Patch available CNA
- SIMATIC RF600R family VendorSiemens Affected before V3.2.1 Fixed in V3.2.1 Patch available CNA
- SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) VendorSiemens Affected All versions >= V2.5 < V2.6.1 Fixed in — No fix listed CNA
- SIMATIC S7-1500 Software Controller VendorSiemens Affected All versions between V2.5 (including) and V2.7 (excluding) Fixed in — No fix listed CNA
- SIMATIC WinCC OA VendorSiemens Affected All versions < V3.15 P018 Fixed in — No fix listed CNA
- SIMATIC WinCC Runtime Advanced VendorSiemens Affected All versions < V15.1 Upd 4 Fixed in — No fix listed CNA
- SINEC NMS VendorSiemens Affected All versions < V1.0 SP1 Fixed in — No fix listed CNA
- SINEMA Server VendorSiemens Affected All versions < V14 SP2 Fixed in — No fix listed CNA
- SINUMERIK OPC UA Server VendorSiemens Affected before V2.1 Fixed in V2.1 Patch available CNA
- TeleControl Server Basic VendorSiemens Affected before V3.1.1 Fixed in V3.1.1 Patch available CNA
CPE configurations NVD · 68
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_cp443-1_opc_ua_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp443-1_opc_ua:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_et_200_open_controller_cpu_1515sp_pc2_firmware:*:*:*:*:*:*:*:* | before 2.7 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_et_200_open_controller_cpu_1515sp_pc2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc_diagmonitor_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc_diagmonitor:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_net_pc_software_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_net_pc_software:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_rf188c_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf188c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:simatic_cp443-1_opc_ua_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp443-1_opc_ua:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_et_200_open_controller_cpu_1515sp_pc2_firmware:*:*:*:*:*:*:*:* Versions before 2.7 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_et_200_open_controller_cpu_1515sp_pc2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc_diagmonitor_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc_diagmonitor:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_net_pc_software_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_net_pc_software:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_rf188c_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf188c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 58 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_rf600r_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf600r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:* | up to 2.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:a:siemens:opc_unified_architecture:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:* | up to 2.5 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_wincc_oa:*:*:*:*:*:*:*:* | before 3.15-p018 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_wincc_runtime_comfort:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_wincc_runtime_hsp_comfort:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_wincc_runtime_mobile:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinec-nms:*:*:*:*:*:*:*:* | before 1.0 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinec-nms:1.0:-:*:*:*:*:*:* | 1.0 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinema_server:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinumerik_opc_ua_server:*:*:*:*:*:*:*:* | before 2.1 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:telecontrol_server_basic:*:*:*:*:*:*:*:* | before 3.1.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500f_firmware:*:*:*:*:*:*:*:* | up to 2.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500s_firmware:*:*:*:*:*:*:*:* | up to 2.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500t_firmware:*:*:*:*:*:*:*:* | up to 2.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:*:*:*:*:*:*:*:* | before 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:15.1:-:*:*:*:*:*:* | 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:15.1:upd_1:*:*:*:*:*:* | 15.1 upd_1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:15.1:upd_2:*:*:*:*:*:* | 15.1 upd_2 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:15.1:upd_3:*:*:*:*:*:* | 15.1 upd_3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:*:*:*:*:*:*:*:* | before 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:-:*:*:*:*:*:* | 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:upd_1:*:*:*:*:*:* | 15.1 upd_1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:upd_2:*:*:*:*:*:* | 15.1 upd_2 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:upd_3:*:*:*:*:*:* | 15.1 upd_3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp400f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:*:*:*:*:*:*:*:* | before 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:-:*:*:*:*:*:* | 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:upd_1:*:*:*:*:*:* | 15.1 upd_1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:upd_2:*:*:*:*:*:* | 15.1 upd_2 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:upd_3:*:*:*:*:*:* | 15.1 upd_3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp900:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:*:*:*:*:*:*:*:* | before 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:-:*:*:*:*:*:* | 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:upd_1:*:*:*:*:*:* | 15.1 upd_1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:upd_2:*:*:*:*:*:* | 15.1 upd_2 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:upd_3:*:*:*:*:*:* | 15.1 upd_3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp700f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:*:*:*:*:*:*:*:* | before 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:-:*:*:*:*:*:* | 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:upd_1:*:*:*:*:*:* | 15.1 upd_1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:upd_2:*:*:*:*:*:* | 15.1 upd_2 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:upd_3:*:*:*:*:*:* | 15.1 upd_3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:*:*:*:*:*:*:*:* | before 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:-:*:*:*:*:*:* | 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:upd_1:*:*:*:*:*:* | 15.1 upd_1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:upd_2:*:*:*:*:*:* | 15.1 upd_2 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:upd_3:*:*:*:*:*:* | 15.1 upd_3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp900f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:simatic_rf600r_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf600r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:* Versions up to 2.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:a:siemens:opc_unified_architecture:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:* Versions up to 2.5 Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_wincc_oa:*:*:*:*:*:*:*:* Versions before 3.15-p018 Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_wincc_runtime_comfort:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_wincc_runtime_hsp_comfort:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_wincc_runtime_mobile:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinec-nms:*:*:*:*:*:*:*:* Versions before 1.0 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinec-nms:1.0:-:*:*:*:*:*:* Versions 1.0 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinema_server:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinumerik_opc_ua_server:*:*:*:*:*:*:*:* Versions before 2.1 Vulnerable ·Siemens
- cpe:2.3:a:siemens:telecontrol_server_basic:*:*:*:*:*:*:*:* Versions before 3.1.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500f_firmware:*:*:*:*:*:*:*:* Versions up to 2.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500s_firmware:*:*:*:*:*:*:*:* Versions up to 2.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500t_firmware:*:*:*:*:*:*:*:* Versions up to 2.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:*:*:*:*:*:*:*:* Versions before 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:15.1:upd_1:*:*:*:*:*:* Versions 15.1 upd_1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:15.1:upd_2:*:*:*:*:*:* Versions 15.1 upd_2 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:15.1:upd_3:*:*:*:*:*:* Versions 15.1 upd_3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:*:*:*:*:*:*:*:* Versions before 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:upd_1:*:*:*:*:*:* Versions 15.1 upd_1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:upd_2:*:*:*:*:*:* Versions 15.1 upd_2 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:upd_3:*:*:*:*:*:* Versions 15.1 upd_3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp400f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:*:*:*:*:*:*:*:* Versions before 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:upd_1:*:*:*:*:*:* Versions 15.1 upd_1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:upd_2:*:*:*:*:*:* Versions 15.1 upd_2 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:upd_3:*:*:*:*:*:* Versions 15.1 upd_3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:*:*:*:*:*:*:*:* Versions before 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:upd_1:*:*:*:*:*:* Versions 15.1 upd_1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:upd_2:*:*:*:*:*:* Versions 15.1 upd_2 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:upd_3:*:*:*:*:*:* Versions 15.1 upd_3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp700f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:*:*:*:*:*:*:*:* Versions before 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:upd_1:*:*:*:*:*:* Versions 15.1 upd_1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:upd_2:*:*:*:*:*:* Versions 15.1 upd_2 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:upd_3:*:*:*:*:*:* Versions 15.1 upd_3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:*:*:*:*:*:*:*:* Versions before 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:upd_1:*:*:*:*:*:* Versions 15.1 upd_1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:upd_2:*:*:*:*:*:* Versions 15.1 upd_2 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:upd_3:*:*:*:*:*:* Versions 15.1 upd_3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp900f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (Siemens) Fixed in V2.7
- Fix · CNA SIMATIC IPC DiagMonitor (Siemens) Fixed in V5.1.3
- Fix · CNA SIMATIC RF188C (Siemens) Fixed in V1.1.0
- Fix · CNA SIMATIC RF600R family (Siemens) Fixed in V3.2.1
- Fix · CNA SINUMERIK OPC UA Server (Siemens) Fixed in V2.1
- Fix · CNA TeleControl Server Basic (Siemens) Fixed in V3.1.1
Timeline
- 2026-10-02 Threatist record created from CVE-2019-6575
- 2026-10-03 Alias added: GHSA-q8p5-c986-46jg
References
Sources
- CVE-2019-6575 · CVE Program
- CVE-2019-6575 · NVD
- FIRST EPSS
- GHSA-q8p5-c986-46jg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences