CVE-2019-19282

高 7.5CVE-2019-19282 · 10/03/2020 公開 · 17/06/2026 更新

要点

CVE-2019-19282 は openpcs 7 (siemens), simatic batch (siemens), simatic net pc (siemens) に影響する深刻度「高」 (CVSS 7.5) の脆弱性です。
今後30日間に悪用される確率（EPSS）：1.3%（全脆弱性の 71.4% より高い）。
対処：16, 9.0 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
openpcs 7 siemens	`= 9.0= 9.0_update_1`	修正版なし
simatic batch siemens	`= 9.0`	修正版なし
simatic net pc siemens	`= 16< 16`	`16`
simatic pcs 7 siemens	`= 8.1= 8.2= 9.0`	修正版なし
simatic route control siemens	`= 9.0< 9.0`	`9.0`
simatic wincc siemens	`= 13= 14.0.1= 15.1= 16= 7.4= 7.5= 7.5.1`	修正版なし

概要

A vulnerability has been identified in OpenPCS 7 V8.1 (All versions), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd3), SIMATIC BATCH V8.1 (All versions), SIMATIC BATCH V8.2 (All versions < V8.2 Upd12), SIMATIC BATCH V9.0 (All versions < V9.0 SP1 Upd5), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Update 1), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions < V9.0 Upd4), SIMATIC WinCC (TIA Portal) V13 (All versions < V13 SP2), SIMATIC WinCC (TIA Portal) V14 (All versions < V14 SP1 Update 10), SIMATIC WinCC (TIA Portal) V15.1 (All versions < V15.1 Update 5), SIMATIC WinCC (TIA Portal) V16 (All versions < V16 Update 1), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 14), SIMATIC WinCC V7.5 (All versions < V7.5 SP1 Update 1). Through specially crafted messages, when encrypted communication is enabled, an attacker with network access could use the vulnerability to compromise the availability of the system by causing a Denial-of-Service condition. Successful exploitation requires no system privileges and no user interaction.