Read the docs
TI-2019-10384 Aliases CVE-2019-13929GHSA-8r46-6p4v-4rq3

A vulnerability has been identified in SIMATIC IT UADM (All versions < V1.3).

Priority LOW 31CWE-321Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-321.

Summary

A vulnerability has been identified in SIMATIC IT UADM (All versions < V1.3). An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security vulnerability could be exploited only if the attacker is authenticated. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises the confidentiality of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.

Why it matters now

EPSS 0.01273 70th percentileScored 2026-11-07
Fix Fixed SIMATIC IT UADM (Siemens AG): V1.3

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSIMATIC IT UADMbefore V1.3V1.3Patch availableCNA
  • SIMATIC IT UADM VendorSiemens Affected before V1.3 Fixed in V1.3 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:siemens:simatic_it_uadm:*:*:*:*:*:*:*:*before 1.3VulnerableSiemens
  • cpe:2.3:a:siemens:simatic_it_uadm:*:*:*:*:*:*:*:* Versions before 1.3 Vulnerable ·Siemens

Remediation

  • Fix · CNA SIMATIC IT UADM (Siemens AG) Fixed in V1.3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-13929
  2. 2026-10-03 Alias added: GHSA-8r46-6p4v-4rq3

References

Sources