Skip to content
Fencer Vulns
medium 5.9

CVE-2019-10929 json

A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl.

published 2019-08-13 7 y ago modified 2026-06-17 4 mo ago also EUVD-2019-2643

cvss
5.9
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.0%
EPSS 1.0% chance of exploitation in 30 days, percentile 62%
public exploits
0
none known

Summary

A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V20.8), SIMATIC HMI Panel (incl. SIPLUS variants) (All versions), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.4.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.8.1), SIMATIC S7-1500 Software Controller (All versions < V20.8), SIMATIC S7-PLCSIM Advanced (All versions < V3.0), SIMATIC STEP 7 (TIA Portal) (All versions < V16), SIMATIC WinCC (TIA Portal) (All versions < V16), SIMATIC WinCC OA (All versions < V3.16 P013), SIMATIC WinCC Runtime Advanced (All versions < V16), SIMATIC WinCC Runtime Professional (All versions < V16), TIM 1531 IRC (incl. SIPLUS NET variants) (All versions < V2.1). Affected devices contain a message protection bypass vulnerability due to certain properties in the calculation used for integrity protection. This could allow an attacker in a Man-in-the-Middle position to modify network traffic sent on port 102/tcp to the affected devices.

Patch / fix

  • siemens simatic_net_pc 16
  • siemens simatic_step_7 16
  • siemens simatic_wincc 16
  • siemens simatic_tim_1531_irc_firmware 2.1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-19-344-04 updated cvss 3.7

Siemens SIMATIC Products (Update C)

  • Siemens SIMATIC CP 1626 Siemens SIMATIC HMI Panel (incl. SIPLUS variants)
    affected: no fix planned
  • Siemens SIMATIC NET PC Software V14 <V14_SP1_Update_14
    affected: fixed in V14 support.industry.siemens.com
  • Siemens SIMATIC NET PC Software V15
    affected: no fix planned
  • Siemens SIMATIC STEP 7 (TIA Portal) <V16 Siemens SIMATIC WinCC (TIA Portal) <V16
    affected: fixed in V16 support.industry.siemens.com
  • Siemens SIMATIC WinCC OA <V3.16_P013
    affected: fixed in V3.16 winccoa.com
  • Siemens SIMATIC WinCC Runtime Advanced <V16 Siemens SIMATIC WinCC Runtime Professional <V16
    affected: fixed in V16 support.industry.siemens.com
  • Siemens TIM 1531 IRC (incl. SIPLUS NET variants) <V2.1
    affected: fixed in V2.1 support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-19-344-06 updated cvss 3.7

Siemens SIMATIC S7-1200 and S7-1500 CPU Families (Update B)

  • Siemens SIMATIC Drive Controller family * (only affected by CVE-2019-10943)
    affected: mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” us-cert.gov
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
    affected: fixed in v20.8, mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” support.industry.siemens.com
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) >= 20.8 (only affected by CVE-2019-10943), < 20.8
    affected: fixed in v4.4.0, mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” support.industry.siemens.com
  • Siemens SIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC
    affected: fixed in v20.8, mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” support.industry.siemens.com
  • Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants) < 4.4.0, >= 4.4.0 (only affected by CVE-2019-10943)
    affected: fixed in v4.4.0, mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) < 2.8.1, >= 2.8.1 (only affected by CVE-2019-10943)
    affected: fixed in v2.8.1, mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” support.industry.siemens.com
  • Siemens SIMATIC S7-1500 Software Controller < 20.8, >= 20.8 (only affected by CVE-2019-10943)
    affected: fixed in v4.4.0, mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” support.industry.siemens.com
  • Siemens SIMATIC S7-PLCSIM Advanced < 3.0, >= 3.0 (only affected by CVE-2019-10943)
    affected: fixed in v3.0, mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” support.industry.siemens.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

0.98% chance of exploitation in the next 30 days, higher than 62% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

  • Siemens SIMATIC CP 1626
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
  • Siemens SIMATIC HMI Panel (incl. SIPLUS variants)
  • Siemens SIMATIC NET PC Software V14
  • Siemens SIMATIC NET PC Software V15
  • Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
  • Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
  • Siemens SIMATIC S7-1500 Software Controller
  • Siemens SIMATIC S7-PLCSIM Advanced
  • Siemens SIMATIC STEP 7 (TIA Portal)
  • Siemens SIMATIC WinCC (TIA Portal)
  • Siemens SIMATIC WinCC OA
  • Siemens SIMATIC WinCC Runtime Advanced
  • Siemens SIMATIC WinCC Runtime Professional
  • Siemens TIM 1531 IRC (incl. SIPLUS NET variants)

Classification

Weakness
  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.