CVE-2019-13939 : A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus Source Code (All versions). By sending specially crafted DHCP packets to a device where the DHCP client is enabled, an attacker could change the IP address of the device to an invalid value.

Published 2020-01-16 16:15:16

Updated 2024-02-13 09:15:43

Source Siemens AG

View at NVD, CVE.org

Vulnerability category: Input validation

Products affected by CVE-2019-13939

Siemens » Apogee Modular Equiment Controller Firmware
Versions before (<) 2.8.2
cpe:2.3:o:siemens:apogee_modular_equiment_controller_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Apogee Modular Equiment Controller » Version: N/A
Siemens » Apogee Modular Building Controller Firmware
Versions before (<) 2.8.2
cpe:2.3:o:siemens:apogee_modular_building_controller_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Apogee Modular Building Controller » Version: N/A
Siemens » Apogee Pxc Firmware
Versions up to, including, (<=) 2.8.2
cpe:2.3:o:siemens:apogee_pxc_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Apogee Pxc » Version: N/A
Siemens » Desigo Pxc Firmware
Versions from including (>=) 2.3
cpe:2.3:o:siemens:desigo_pxc_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Desigo Pxc » Version: N/A
Siemens » Desigo Pxm20 Firmware
Versions from including (>=) 2.3
cpe:2.3:o:siemens:desigo_pxm20_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Desigo Pxm20 » Version: N/A
Siemens » Simotics Connect 400 Firmware
Versions up to, including, (<=) 0.3.0.95
cpe:2.3:o:siemens:simotics_connect_400_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simotics Connect 400 » Version: N/A
Siemens » Talon Tc Firmware
Versions from including (>=) 3.0
cpe:2.3:o:siemens:talon_tc_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Talon Tc » Version: N/A
Siemens » Nucleus Net
cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*
Matching versions
Siemens » Nucleus Readystart
Versions before (<) 2017.02.2
cpe:2.3:a:siemens:nucleus_readystart:*:*:*:*:*:*:*:*
Matching versions
Siemens » Nucleus Safetycert
cpe:2.3:a:siemens:nucleus_safetycert:*:*:*:*:*:*:*:*
Matching versions
Siemens » Nucleus Source Code
cpe:2.3:a:siemens:nucleus_source_code:*:*:*:*:*:*:*:*
Matching versions
Siemens » Nucleus Rtos
cpe:2.3:o:siemens:nucleus_rtos:*:*:*:*:*:*:*:*
Matching versions
Siemens » Capital Vstar
cpe:2.3:a:siemens:capital_vstar:*:*:*:*:*:*:*:*
Matching versions
Siemens » Desigo Pxc00-e.d Firmware
Versions from including (>=) 2.3.0 and before (<) 6.00.327
cpe:2.3:o:siemens:desigo_pxc00-e.d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Desigo Pxc00-e.d » Version: N/A
Siemens » Desigo Pxc00-u Firmware
Versions from including (>=) 2.3.0 and before (<) 6.00.327
cpe:2.3:o:siemens:desigo_pxc00-u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Desigo Pxc00-u » Version: N/A
Siemens » Desigo Pxc001-e.d Firmware
Versions from including (>=) 2.3.0 and before (<) 6.00.327
cpe:2.3:o:siemens:desigo_pxc001-e.d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Desigo Pxc001-e.d » Version: N/A
Siemens » Desigo Pxc12-e.d Firmware
Versions from including (>=) 2.3.0 and before (<) 6.00.327
cpe:2.3:o:siemens:desigo_pxc12-e.d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Desigo Pxc12-e.d » Version: N/A
Siemens » Desigo Pxc22-e.d Firmware
Versions from including (>=) 2.3.0 and before (<) 6.00.327
cpe:2.3:o:siemens:desigo_pxc22-e.d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Desigo Pxc22-e.d » Version: N/A
Siemens » Desigo Pxc22.1-e.d Firmware
Versions from including (>=) 2.3.0 and before (<) 6.00.327
cpe:2.3:o:siemens:desigo_pxc22.1-e.d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Desigo Pxc22.1-e.d » Version: N/A
Siemens » Desigo Pxc36.1-e.d Firmware
Versions from including (>=) 2.3.0 and before (<) 6.00.327
cpe:2.3:o:siemens:desigo_pxc36.1-e.d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Desigo Pxc36.1-e.d » Version: N/A
Siemens » Desigopxc50-e.d Firmware » Version: N/A
cpe:2.3:o:siemens:desigopxc50-e.d_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Desigopxc50-e.d » Version: N/A
Siemens » Desigopxc64-u Firmware » Version: N/A
cpe:2.3:o:siemens:desigopxc64-u_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Desigopxc64-u » Version: N/A
Siemens » Desigopxc100-e.d Firmware » Version: N/A
cpe:2.3:o:siemens:desigopxc100-e.d_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Desigopxc100-e.d » Version: N/A
Siemens » Desigopxc128-u Firmware » Version: N/A
cpe:2.3:o:siemens:desigopxc128-u_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Desigopxc128-u » Version: N/A
Siemens » Desigopxc200-e.d Firmware » Version: N/A
cpe:2.3:o:siemens:desigopxc200-e.d_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Desigopxc200-e.d » Version: N/A
Siemens » Desigopxm20-e Firmware » Version: N/A
cpe:2.3:o:siemens:desigopxm20-e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Desigopxm20-e » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-13939

EPSS FAQ

0.14%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 49 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-13939

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.8	MEDIUM	AV:A/AC:L/Au:N/C:N/I:P/A:P	6.5	4.9	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: Partial
7.1	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H	2.8	4.2	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: High
7.1	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H	2.8	4.2	Siemens AG	2024-02-13
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: High

CWE ids for CVE-2019-13939

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: productcert@siemens.com (Primary)
CWE-840

Assigned by: productcert@siemens.com (Secondary)

References for CVE-2019-13939

https://cert-portal.siemens.com/productcert/pdf/ssa-434032.pdf

Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-434032.html

SSA-434032
https://cert-portal.siemens.com/productcert/html/ssa-162506.html

SSA-162506
https://us-cert.cisa.gov/ics/advisories/icsa-20-105-06

Siemens SIMOTICS, Desigo, APOGEE, and TALON (Update A) | CISA
Third Party Advisory;US Government Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-162506.pdf

Vendor Advisory

Jump to

Vulnerability Details : CVE-2019-13939

Products affected by CVE-2019-13939

Exploit prediction scoring system (EPSS) score for CVE-2019-13939

CVSS scores for CVE-2019-13939

CWE ids for CVE-2019-13939

References for CVE-2019-13939