Skip to content
Fencer Vulns
high 7.5

CVE-2019-10943 json

A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl.

published 2019-08-13 7 y ago modified 2026-06-17 4 mo ago also EUVD-2019-2657

cvss
7.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.0%
EPSS 1.0% chance of exploitation in 30 days, percentile 61%
public exploits
0
none known

Summary

A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V20.8), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V20.8), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.4.0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.4.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.8.1), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.8.1), SIMATIC S7-1500 Software Controller (All versions < V20.8), SIMATIC S7-1500 Software Controller (All versions >= V20.8), SIMATIC S7-PLCSIM Advanced (All versions < V3.0), SIMATIC S7-PLCSIM Advanced (All versions >= V3.0). An attacker with network access to port 102/tcp could potentially modify the user program on the PLC in a way that the running code is different from the source code which is stored on the device. An attacker must have network access to affected devices and must be able to perform changes to the user program. The vulnerability could impact the perceived integrity of the user program stored on the CPU. An engineer that tries to obtain the code of the user program running on the device, can receive different source code that is not actually running on the device.

Patch / fix

  • siemens simatic_s7-1500_software_controller 20.8
  • siemens simatic_s7_plcsim_advanced 3.0
  • siemens simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware 20.8
  • siemens simatic_s7-1200_cpu_1211c_firmware 4.4
  • siemens simatic_s7-1200_cpu_1212c_firmware 4.4
  • siemens simatic_s7-1200_cpu_1214c_firmware 4.4
  • siemens simatic_s7-1200_cpu_1215c_firmware 4.4
  • siemens simatic_s7-1200_cpu_1217c_firmware 4.4
  • siemens simatic_s7-1500_cpu_1518_firmware 2.8.1
  • siemens simatic_s7-1500_cpu_1511c_firmware 2.8.1
  • siemens simatic_s7-1500_cpu_1512c_firmware 2.8.1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-19-344-06 updated cvss 5.3

Siemens SIMATIC S7-1200 and S7-1500 CPU Families (Update B)

  • Siemens SIMATIC Drive Controller family * (only affected by CVE-2019-10943)
    affected: mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” us-cert.gov
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
    affected: fixed in v20.8, mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” support.industry.siemens.com
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) >= 20.8 (only affected by CVE-2019-10943), < 20.8
    affected: fixed in v4.4.0, mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” support.industry.siemens.com
  • Siemens SIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC
    affected: fixed in v20.8, mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” support.industry.siemens.com
  • Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants) < 4.4.0, >= 4.4.0 (only affected by CVE-2019-10943)
    affected: fixed in v4.4.0, mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) < 2.8.1, >= 2.8.1 (only affected by CVE-2019-10943)
    affected: fixed in v2.8.1, mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” support.industry.siemens.com
  • Siemens SIMATIC S7-1500 Software Controller < 20.8, >= 20.8 (only affected by CVE-2019-10943)
    affected: fixed in v4.4.0, mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” support.industry.siemens.com
  • Siemens SIMATIC S7-PLCSIM Advanced < 3.0, >= 3.0 (only affected by CVE-2019-10943)
    affected: fixed in v3.0, mitigation “Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet.” support.industry.siemens.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

0.95% chance of exploitation in the next 30 days, higher than 61% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

  • Siemens SIMATIC Drive Controller family
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
  • Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
  • Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
  • Siemens SIMATIC S7-1500 Software Controller
  • Siemens SIMATIC S7-PLCSIM Advanced

Classification

Weakness
  • CWE-353 Missing Support for Integrity Check
  • CWE-345 Insufficient Verification of Data Authenticity

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.