CVE-2019-19279: siemens siprotec 4 +1 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2019-19279

CVSS 7.5 · High EPSS 1,6%

Kerentanan Improper Input Validation pada siemens siprotec 4, siemens siprotec compact. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability has been identified in SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules (All versions). Specially crafted packets sent to port 50000/UDP of the EN100 Ethernet communication modules could cause a Denial-of-Service of the affected device. A manual reboot is required to recover the service of the device. At the time of advisory publication no public exploitation of this security vulnerability was known to Siemens.

Rincian

Terbit di NVD: 10 Maret 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-20: Improper Input Validation
EPSS (30 hari): 1,6% peluang dieksploitasi; lebih tinggi dari 75,0% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
siemens	siprotec 4	Semua versi
siemens	siprotec compact	Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://cert-portal.siemens.com/productcert/pdf/ssa-974843.pdf advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.