Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-13921

A vulnerability has been identified in SIMATIC WinAC RTX (F) 2010 (All versions < SP3 Update 1). Affected versions of the software contain a vulnerability that could allow an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large HTTP request is sent to the executing service. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the service provided by the software.

Published

2019-10-10T14:15:14.783

Last Modified

2024-11-21T04:25:42.200

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-410
  • Type: Primary
    CWE-400
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application siemens simatic_winac_rtx_\(f\)_2010 * Yes
Application siemens simatic_winac_rtx_\(f\)_2010 - Yes
Application siemens simatic_winac_rtx_\(f\)_2010 - Yes
Application siemens simatic_winac_rtx_\(f\)_2010 - Yes
Application siemens simatic_winac_rtx_\(f\)_2010 - Yes
Application siemens simatic_winac_rtx_\(f\)_2010 sp1 Yes
Application siemens simatic_winac_rtx_\(f\)_2010 sp2 Yes
Application siemens simatic_winac_rtx_\(f\)_2010 sp2 Yes
Application siemens simatic_winac_rtx_\(f\)_2010 sp2 Yes
Application siemens simatic_winac_rtx_\(f\)_2010 sp2 Yes
Application siemens simatic_winac_rtx_\(f\)_2010 sp2 Yes
References