Skip to content
Fencer Vulns
high 7.2

CVE-2019-10935 json

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7…

published 2019-07-11 7 y ago modified 2026-06-17 4 mo ago also EUVD-2019-2649

cvss
7.2
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.3%
EPSS 1.3% chance of exploitation in 30 days, percentile 70%
public exploits
0
none known

Summary

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd 11), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP2 with WinCC V7.4 SP1 Upd11), SIMATIC WinCC Professional (TIA Portal V13) (All versions), SIMATIC WinCC Professional (TIA Portal V14) (All versions < V14 SP1 Upd 9), SIMATIC WinCC Professional (TIA Portal V15) (All versions < V15.1 Upd 3), SIMATIC WinCC Runtime Professional V13 (All versions), SIMATIC WinCC Runtime Professional V14 (All versions < V14.1 Upd 8), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Upd 3), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 (All versions < V7.3 Upd 19), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 11), SIMATIC WinCC V7.5 (All versions < V7.5 Upd 3). The SIMATIC WinCC DataMonitor web application of the affected products allows to upload arbitrary ASPX code. The security vulnerability could be exploited by an authenticated attacker with network access to the WinCC DataMonitor application. No user interaction is required to exploit this vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the affected device. At the stage of publishing this security advisory no public exploitation is known.

Patch / fix

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-19-192-02 updated cvss 7.2

ICSA-19-192-02 Siemens SIMATIC WinCC and PCS7 (Update C)

  • Siemens SIMATIC PCS 7 V8.0 and earlier
    affected: mitigation
  • Siemens SIMATIC PCS 7 V8.1 <V8.1_with_WinCC_V7.3_Upd_19
    affected: fixed in V7.3, mitigation support.industry.siemens.com
  • Siemens SIMATIC PCS 7 V8.2 <V8.2_SP1_with_WinCC_V7.4_SP1_Upd_11 Siemens SIMATIC PCS 7 V9.0 <V9.0_SP2_with_WinCC_V7.4_SP1_Upd11
    affected: fixed in V7.4, mitigation support.industry.siemens.com
  • Siemens SIMATIC WinCC Professional (TIA Portal V13)
    affected: mitigation
  • Siemens SIMATIC WinCC Professional (TIA Portal V14) <V14_SP1_Upd_9
    affected: fixed in V14, mitigation support.industry.siemens.com
  • Siemens SIMATIC WinCC Professional (TIA Portal V15) <V15.1_Upd_3
    affected: fixed in V15.1, mitigation support.industry.siemens.com
  • Siemens SIMATIC WinCC Runtime Professional V13
    affected: mitigation
  • Siemens SIMATIC WinCC Runtime Professional V14 <V14.1_Upd_8
    affected: fixed in V14.1, mitigation support.industry.siemens.com
show 5 more

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

1.27% chance of exploitation in the next 30 days, higher than 70% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.0 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P

Affected products

  • Siemens AG SIMATIC PCS 7 V8.0 and earlier
  • Siemens AG SIMATIC PCS 7 V8.1
  • Siemens AG SIMATIC PCS 7 V8.2
  • Siemens AG SIMATIC PCS 7 V9.0
  • Siemens AG SIMATIC WinCC Professional (TIA Portal V13)
  • Siemens AG SIMATIC WinCC Professional (TIA Portal V14)
  • Siemens AG SIMATIC WinCC Professional (TIA Portal V15)
  • Siemens AG SIMATIC WinCC Runtime Professional V13
  • Siemens AG SIMATIC WinCC Runtime Professional V14
  • Siemens AG SIMATIC WinCC Runtime Professional V15
  • Siemens AG SIMATIC WinCC V7.2 and earlier
  • Siemens AG SIMATIC WinCC V7.3
  • Siemens AG SIMATIC WinCC V7.4
  • Siemens AG SIMATIC WinCC V7.5

Classification

Weakness
  • CWE-434 Unrestricted Upload of File with Dangerous Type

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.